In the Linux kernel, a size miscalculation in the drop_monitor code caused the kernel to underestimate the required buffer size for certain 64‑bit attributes. On 32‑bit systems without CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS, the code reserves too few bytes, and when the driver later attempts to write the attribute, the memory overwrite triggers skb_over_panic(), which brings down the entire kernel. The vulnerability does not directly allow arbitrary code execution but can be leveraged by a remote attacker to cause a reboot or service interruption by sending crafted packets to the drop_monitor interface.

The flaw affects the Linux kernel on 32‑bit architectures that lack the efficient unaligned access configuration. Support is provided by the Linux vendor for all kernel releases that include drop_monitor, but the specific kernel versions affected are not enumerated in the official advisory.

With a CVSS score of 7.5 and an EPSS of less than 1%, the risk assessment suggests a high severity denial of service. Because the flaw is exposed through network packets processed by the drop_monitor, the likely attack vector is remote, and an attacker with network access could trigger the crash. The vulnerability is not catalogued in CISA KEV, and no official workaround is listed, highlighting the importance of applying the patch as soon as possible.