The linux kernel–fbnic driver contains a logic flaw that selects an incorrect NAPI vector for an Rx queue when standalone Tx vectors are present. When a queue is restarted, the driver may dereference a NULL or freed pointer, which can trigger a kernel panic and bring the host down. The primary effect is an availability loss: the operating system becomes unresponsive until rebooted. The weakness is a classic NULL pointer and use‑after‑free error.

Systems running a Linux kernel build that includes the fbnic network driver and have not applied the patch that fixes the NAPI vector index calculation are affected. No specific vendor or version list is provided, so all installations that still carry the unpatched kernel code are considered vulnerable.

The CVSS score of 4.1 signals moderate severity, but the EPSS score of <1% and absence from the CISA KEV catalog suggest exploitation is unlikely. The flaw requires the attacker to influence network queue operations or have local kernel privileges to trigger a queue restart, after which a crash can occur. Overall risk remains moderate, mitigated by the low likelihood of exploitation.