The vulnerability is an anchor socket buffer (skb) leak in the Linux kernel TLS offload subsystem. During a failed offload RX setup, the error path cleans most allocated resources, but it fails to free an skb allocated in the string parser initialization. This leak can accumulate over time, potentially exhausting kernel memory or remote areas of the system, and may result in degraded performance or service interruption. The weakness involves improper resource management and falls under the category of memory/resource leaks.

All Linux kernel builds that incorporate TLS offload functionality prior to the patch that removes the skb allocation in tls_strp_init are affected. The vulnerability is specifically tied to the net: tls: tls_set_device_offload_rx() routine and its error handling path. It affects the generic Linux kernel, as denoted by the CPE entry for Linux kernel releases not containing the fix.

No public exploits or indicators of exploitation are listed, and the EPSS score is unavailable, indicating no known widespread exploitation activity. The vulnerability does not provide network-exposed code execution, but an attacker who can trigger frequent offload failures could drain system memory over time, causing a denial of service. The risk is considered moderate to high in environments where TLS offload is enabled and the affected kernel version is in use. Since the issue is a memory consumption problem rather than a code execution vector, immediate response is mitigated by a kernel update, but monitoring for abnormal memory usage is prudent.