The Linux kernel stmmac driver has a vulnerability where the workqueue variable is not cleared (set to NULL) after destroy_workqueue() is called during driver suspend. If the DMA engine initialization fails during resume, the workqueue may not be initialized but the resume process continues, leading to a scenario where the driver attempts to destroy a non-initialized workqueue. This causes a kernel NULL pointer dereference and panic. The vulnerability is tracked as CVE-2024-26802 and is related to improper handling of workqueue lifecycle in the stmmac driver, causing a denial of service via kernel crash.

This vulnerability can cause a denial of service by crashing the kernel or module due to a NULL pointer dereference when the stmmac driver attempts to destroy a workqueue that was never initialized. This results in network interface malfunction, transmit queue timeouts, and 'Reset adapter' errors, disrupting normal operation of affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The described fix involves setting the workqueue variable to NULL after destroying it to prevent kernel panic. Until an official patch is available, avoid scenarios that trigger the DMA engine initialization failure or suspend/resume cycles on affected drivers if possible.