In the Linux kernel, netfilter logic that extracts Ethernet headers via eth_hdr assumed the socket buffer was associated with an Ethernet device and that a full Ethernet header was present. The missing checks allowed a crafted packet to trigger an invalid memory access when the code used eth_hdr, potentially causing a kernel fault, data exposure or denial of service.

The vulnerability affects all Linux kernel builds that include the netfilter modules ip6t_eui64, xt_mac, the ipset types bitmap:ip,mac, hash:ip,mac, hash:mac, and the nf_log_syslog feature. No specific kernel version is listed; any kernel exposing these modules before the applied patch is impacted.

There is no CVSS score or EPSS information available, but the flaw touches the kernel privilege level and can crash or corrupt kernel memory. Exploitation would involve delivering a specially crafted network packet that is processed by one of the affected netfilter modules. Although not listed in the CISA KEV catalog, the severity and potential impact make it a high‑risk issue. Attackers could achieve denial of service or, in rare cases, kernel memory disclosure if the fault occurs in a context that exposes sensitive data.