The Linux kernel’s ethtool tsconfig subsystem omits a required call to ethnl_ops_complete() when the data preparation routine encounters an error. This missing completion step can leave netlink resources in an incomplete state. The description does not report a confirmed crash or denial‑of‑service, only that the cleanup routine is omitted.

All Linux kernel installations that do not include the commit adding the missing ethnl_ops_complete() call are vulnerable. No specific kernel versions are listed, so any kernel version lacking the patch is considered affected.

The CVSS score of 5.5 indicates a moderate severity impact, while the EPSS score of <1% suggests a very low probability of exploitation in the wild at this time. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the missing completion routine could be triggered by a failing tsconfig call, which would typically require local or elevated privileges to configure network interfaces. An exploit may result in kernel instability or resource leakage, but no definitive crash or Denial‑of‑Service has been documented. The overall risk remains moderate, and patching is recommended.