A use‑after‑free occurs when the bcmgenet driver disables its transmit queues before stopping its Net‑API (NAPI). A transmit in flight can reach the freed ring buffer, leading to memory corruption and a kernel crash, which manifests as a denial of service. The flaw is triggered by actions such as changing the MTU or suspending the interface, and is confirmed by KASAN reports that show a write to freed memory.

The vulnerability exists in the Linux kernel's bcmgenet network driver. It affects all Linux installations that include the unchanged driver code prior to the fix committed in the referenced kernel revisions. The bug does not affect specific kernel versions listed in the CVE; any kernel version before the applied patch is potentially vulnerable.

The EPSS score is less than 1%, indicating a very low exploitation probability. The CVSS score of 4.1 indicates the vulnerability's severity. The flaw is not catalogued in CISA's KEV list, indicating that exploitation is not currently widespread. Based on the description, it is inferred that the likely attack vector requires local privileged access, as the vulnerability is triggered by actions such as changing the MTU or suspending the network interface. The attack requires interaction with the affected network driver, such as adjusting interface settings or triggering suspend, which suggests local or privileged execution is needed. While the risk remains for systems that can exercise the vulnerable driver paths, there is no publicly known remote exploitation technique. Updating the kernel or applying the patch remains the safest mitigation.