The flaw arises when the neigh_xmit function is invoked with an uninitialized neighbor table, causing it to return an error and skip its normal skb free routine. As a result, the socket buffer (skb) remains allocated and is not released or queued, leading to a memory leak. This bug exemplifies improper resource deallocation and can undermine system stability by consuming memory over time.

All Linux kernel versions that include the vulnerable neigh_xmit implementation without the ownership changes described in the fix. No specific version numbers are listed in the available data, so the entire vulnerable kernel code base is impacted.

Exact exploitation details are not documented in the advisory, and key metrics such as CVSS and EPSS are not available. The bug appears to be exploitable only in contexts where a local system can trigger neigh_xmit calls with an uninitialized neighbor table—typically environments that manipulate neighbor entries or use MPLS. This might enable a local privileged user to indirectly cause resource exhaustion or a kernel crash, though no known wide‑scale remote exploitation has been reported and the vulnerability is not listed in the CISA KEV catalog.