In the mlx5e XSK driver, the function that transmits packets via XDP fails to clean up DMA mappings and free xdp_frames when the transmit queue is full. The missed unmap and frame release allow runaway memory and DMA allocations to accumulate, potentially causing the driver to report intense pending DMA usage and leading to kernel instability or degraded network performance. The vulnerability does not provide an attacker‑visible privilege escalation or arbitrary code execution path, but it can weaken system reliability when the driver encounters repeated transmit failures.

The issue affects Linux kernel versions that include the mlx5e driver in the net/mlx5e subsystem. Vendor information identifies the affected product as Linux:Linux; specific kernel release ranges are not listed, so any kernel build utilizing the mlx5e XSK path may be impacted.

No CVSS or EPSS score is published, and the vulnerability is not included in the CISA KEV catalog. The exploitability requires entry in the kernel’s mlx5e driver, typically local to the machine, and is most likely triggered under heavy XDP traffic or after a queue becomes full. An attacker with local or privileged access could induce high packet load to accelerate the leak, leading to resource exhaustion. Because the flaw does not provide external remote exploitation, the overall risk is moderate to high for systems running unpatched kernels under high network workloads.