A null pointer dereference vulnerability in the Linux kernel Microsoft Azure Network Adapter driver affects versions 6.18.33 up to 6.18.35, presenting a high risk of denial of service.

This is a null pointer dereference flaw within the net: mana network driver queue reset handler, where unauthenticated remote attackers can trigger conditional driver detachment errors leading to kernel crashes.

A successful exploit results in a complete system crash or kernel panic, leading to localized denial of service for affected hosts. With a CVSS score of 7.5, this high severity rating reflects the disruption of critical infrastructure availability without requiring prior authentication or user interaction.

Immediate Action: Update the Linux kernel to version 6.18.35, 7.0.12, or later where the mana driver detach logic is safely made idempotent.

Proactive Monitoring: Monitor system logs for kernel panics, null pointer exceptions, and unexpected interface resets related to the mana network driver.

Compensating Controls: Implement network boundary controls and traffic restrictions to limit untrusted access to vulnerable virtual network interfaces where possible.

Public Exploit Available: No

Administrators must prioritize updating vulnerable Linux kernel packages to the patched versions immediately to prevent potential denial of service attacks. Applying the appropriate kernel updates removes the root cause of the null pointer dereference during network queue resets.