The Linux kernel function rtm_get_nexthop allocates a netlink socket buffer with a fixed size suitable only for small nexthop groups. When a large nexthop group, such as 512 entries, is requested, the allocation overflows leading to a kernel warning splat. This is a buffer overrun weakness classified as CWE‑131. The impact is a denial of service where a crafted request could cause unstable behavior. Based on the description, it may lead to instability, though the CVE does not explicitly state a crash or memory corruption.

All Linux kernel releases that have not yet incorporated the patch that relocates the skb allocation to dynamic sizing via nh_nlmsg_size() and nlmsg_new(). The affected environment is the Linux kernel itself; no specific micro‑kernel or distribution is listed by the CNA. The vulnerability exists in the default kernel build that uses the fixed NLMSG_GOODSIZE allocation scheme.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of < 1% shows it is unlikely to be actively exploited today. The vulnerability is not yet listed in CISA KEV, and there is no documented exploitation vector. Based on the kernel’s netlink interface, an attacker would need the ability to send a large RTM_GETNEXTHOP request, which typically requires CAP_NET_ADMIN or root privileges, so the risk is moderate on privileged systems and low on non‑privileged hosts. The description notes a warning splat but does not indicate a crash, so the exact impact on stability is inferred.