The txgbe driver in the Linux kernel allocates a property_entry array with a size that exactly matches the number of entries, leaving no space for the required terminating empty property. This off‑by‑one error can lead to an out‑of‑bounds write when the driver appends the terminator, corrupting kernel memory. Such corruption may manifest as a kernel panic or crash.

All Linux kernel installations that employ the txgbe network driver before the relevant patch. The vulnerability is not tied to a specific kernel version in the data, so the workaround applies to any kernel running the unpatched txgbe driver.

Because the flaw resides in a kernel driver, exploitation requires local or privileged access and controlling the txgbe driver to manipulate the property_entry structure. The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, implying no known active exploits. No CVSS score is provided in the public data, but a successful exploit could lead to kernel memory corruption that may cause crashes or instability. Overall, the risk remains moderate today, limited to systems where a local attacker can trigger the driver; remote exploitation is unlikely.