The igc driver for Intel Ethernet devices fails to set the transmit buffer type when initializing SMD frames. Because the igc_tx_buffer objects are reused, a stale XDP or XSK type can remain, causing the transmit completion routine to execute an incorrect cleanup path. This flaw can lead to kernel memory mismanagement and results in a denial‑of‑service condition by crashing or destabilizing the kernel. The weakness corresponds to CWE‑909.

Linux kernel builds that include the igc networking driver in its original, unpatched form are subject to this flaw. Any distribution or custom kernel that deploys the igc driver before the recent patch, regardless of specific version numbers, is potentially vulnerable. The issue is tied to Intel‑based Ethernet hardware controlled by the igc driver.

The CVSS score of 9.8 marks this as a critical flaw, while the EPSS score of less than 1 % indicates a low but non‑zero probability of exploitation. The flaw is not listed in CISA’s KEV catalog, and no public exploits are known. Based on the description, the likely attack vector is the transmission of crafted network packets that trigger the SMD frame handling pathway, which an attacker could use to provoke the improper cleanup routine. The vulnerability requires kernel‑level execution or the ability to influence network traffic received by the affected interface to exercise the fault.