The flaw arises in the Linux kernel’s drop_monitor subsystem where 64‑bit netlink attributes are sized incorrectly. On 32‑bit architectures that lack efficient unaligned access, the size‑estimation routine undercalculates the socket buffer by up to four bytes, causing a subsequent buffer‑overflow kernel panic when the buffer is adjusted. The impact is a system‑wide crash, categorized under CWE‑131 (Incorrect Calculation of Buffer Size) and CWE‑787 (Out‑of‑Bounds Write).

Every Linux kernel that includes the drop_monitor driver on a 32‑bit processor where CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS is disabled is vulnerable. The advisory lists the Linux vendor, but does not specify kernel version ranges; the absence of version data means any kernel shipping this code path is potentially affected.

The CVSS score of 7.5 reflects the severity of a kernel panic, while the EPSS score of below 1% indicates a very low probability that the flaw is widely exploited in the wild. The advisory does not document a publicly available exploit. Based on the description, it is inferred that an attacker could trigger the crash by sending specially crafted netlink messages to the drop_monitor interface, but the exact attack vector is not explicitly stated. The vulnerability is not listed in the CISA KEV catalog, so the likelihood of widespread, known exploitation is minimal, yet the potential impact warrants prompt patching.