The net atl1 network driver in the Linux kernel contains a logic flaw that permits the driver to read an out-of-range value from the field cmb_tpd_next_to_clean. Because the value 0xffff is never valid, the loop that checks for new work spins indefinitely, resulting in a soft lockup. This lockup freezes kernel execution for the affected CPU, effectively denying service. The weakness is a classic infinite-loop error, classified as CWE-703 and CWE-835.

All Linux kernel builds that include the net atl1 driver and have not yet received the patch are susceptible. The vulnerability applies to every vendor maintaining a Linux kernel, as the fix was made in the upstream kernel source. No specific kernel version numbers are provided, so any kernel that has the pending commit remains affected until the patch is applied.

The EPSS score is less than 1%, indicating a low probability of exploitation, and the vulnerability is not listed in CISA KEV. The CVSS score of 4.1 indicates moderate severity. The likely attack vector is local or requires interacting with the network interface card managed by the atl1 driver. An attacker must trigger the out-of-range condition, which typically occurs during PCIe link or MAC resets. Once triggered, the system becomes unavailable until a reset or patch can be applied.