The vulnerability is a race condition in the fbnic network driver's mailbox reset routine that can cause a write‑path deadlock. When the device resets the mailbox, it clears the BME bit while only setting the FLUSH bit, leaving staged writes trapped in the pipeline. Because FLUSH alone never drains these writes, the firmware remains waiting for the flush to complete, effectively blocking the network stack. This flaw represents improper reset handling (CWE-459). The denial of service manifests as an inability to complete outgoing network traffic until the system is restarted or the driver is reinitialized.

Linux kernel versions that include the fbnic driver but lack the commit introducing the AW_FLUSH_MODE bit are vulnerable. Any distribution shipping an unpatched kernel before commit 8947f13 is at risk, regardless of distribution or kernel version.

The CVSS score of 4.4 and EPSS score of <1% indicate a low but nonzero exploitation probability. The flaw requires triggering a mailbox reset, which typically requires local kernel execution or privileged access, so the likely attack vector is local. The vulnerability is not listed in CISA KEV, suggesting no widespread exploitation yet, but the local denial of service risk remains significant for environments that rely on the fbnic driver.