The MACB driver in the Linux kernel contains a flaw where it frees pending transmission buffers (SKBs) without verifying their completion status when the driver is closed. This results in kernel memory corruption that can destabilize the system or potentially allow an attacker to execute arbitrary code if the corruption is successfully leveraged.

All Linux kernel releases that load the macb driver are affected, as the vulnerability stems from the generic MACB network driver. The specific kernel versions are not enumerated in the provided data, so any kernel supporting the macb driver before the applied patch is at risk. The MACB driver is used primarily in embedded systems that include the Linux kernel module for Media Access Control Bus support.

The CVSS score is 5.5, indicating a moderate risk. The EPSS indicates a less than 1% exploitation probability, and the vulnerability is not listed in CISA's KEV catalogue. The flaw requires the driver to be closed or the module unloaded while transmission queues remain populated—an operation typically performed by a user with root privileges. Therefore the attack vector is likely local privilege escalation and the risk of compromise is low, but the failure can cause kernel crashes or system instability.