The Linux kernel fbnic driver incorrectly allocated NAPI vectors for standalone channels, recording 128 vectors for a 64-Tx/64-Rx configuration but allocating only 64. This left NULL entries that were later dereferenced during resource setup, potentially causing a kernel panic or providing an elevation of privilege attack vector if an attacker can influence the channel configuration or device settings.

All Linux kernel installations that include the fbnic network driver and expose a device configured with a 64‑Tx/64‑Rx channel layout are affected. No specific kernel version numbers are listed, so any kernel build that implements the buggy allocation path before the fix is at risk.

No CVSS score is available and the EPSS score is not provided, but the bug introduces a null pointer dereference in kernel space which can lead to a crash. Although no exploit has been publicly reported, the lack of a defensive gating mechanism means that an attacker who can interact with the device’s configuration may trigger the failure. The vulnerability is not currently listed in the CISA KEV catalog. The risk remains contingent on the attacker's ability to directly manipulate the fbnic driver configuration or connect a device that exercises the maximum channel setting.