In Linux kernel version(s) affected by a bug in the fbnic driver, the calculation used to associate a receive queue with its NAPI vector incorrectly uses a modulo operation that can select a transmit NAPI vector instead of the intended one when standalone Tx vectors are present. This mismapping can result in the kernel attempting to operate on a freed or invalid NAPI pointer during a queue restart, potentially causing a null pointer dereference or other memory corruption in the kernel. The impact of this is a kernel panic or system reboot, which manifests as a denial‑of‑service condition for the whole system.

The issue resides in the Linux kernel’s fbnic driver and therefore affects any system running a kernel build that includes the fbnic driver without the applied patch. No specific vendor or version list is provided, so all installations that have not updated to a kernel revision with the fix are potentially vulnerable.

The vulnerability lacks a publicly available CVSS score and EPSS data, but the nature of the flaw suggests a local privilege or kernel‑level exploitation vector. An attacker who can trigger a queue restart after the device has been stopped could cause the kernel to crash. The flaw is not listed in the CISA KEV catalog, indicating no known active exploitation but it could be leveraged in a targeted scenario. Without a CVSS rating or documented exploits, the overall risk remains moderate, conditioned on the presence of the vulnerable driver and the attacker’s ability to influence receive queue operations.