In the Linux kernel, the virtio transport module could accumulate an unbounded number of socket buffers when it receives zero‑length VIRTIO VSOCK packets marked with the end‑of‑message flag. Each such packet increases the queue count while the bytes counter remains zero, allowing an attacker to enqueue a very large number of skbs, exhausting kernel memory and destabilizing the system. This flaw provides a denial‑of‑service vector that can degrade or halt kernel functionality without requiring elevated privileges.

Any Linux kernel that includes the virtio VSOCK transport prior to the fix is vulnerable. The affected code path exists in the standard virtio subsystem used by virtual machines and container runtimes. Specific kernel release information is not delineated in the advisory, so all kernels before the committed patch are considered at risk.

The flaw is exploitable by sending crafted virtio socket packets with zero length and the EOM flag. The attacker only needs to communicate with the virtio device, which may be achievable from within a guest VM or from a privileged container that can access the device. No public exploit is catalogued in CISA KEV, and EPSS data is unavailable, so the exact likelihood remains unknown. Nevertheless, the potential for severe resource exhaustion warrants prompt remediation.