A logic flaw in the Linux kernel WiFi stack causes offloaded frames with 802.3 encapsulation to retain a band value of zero instead of inheriting the correct channel context. This leads the rate calculation routine to select an inappropriate frequency band, potentially resulting in packet loss or significant performance degradation on WiFi links that carry offloaded traffic. The weakness reflects improper initialization of transmission metadata.

All Linux kernel builds that ship the unpatched code are affected, regardless of distribution. The issue resides in the mac80211 WiFi driver module and applies to non‑MLD WiFi interfaces. Any kernel version that includes the referenced commits has been fixed; vendors should verify that their kernel images contain these changes.

The CVSS score is not provided and the EPSS score is unavailable, so the quantitative risk remains unclear. Based on the description, the likely attack vector is an attacker who can inject or modify Wi‑Fi frames, such as a local privileged user or a device that can send crafted 802.3‑encapsulated packets to the interface. While the bug does not provide direct memory corruption or privilege escalation, an attacker can force the interface to use the wrong band, causing traffic degradation, denial of service for a specific connection, or facilitating further network reconnaissance. The vulnerability is not currently listed in the CISA KEV catalog.