The vulnerability concerns the espintcp subsystem of the Linux kernel, where partial TCP send operations were incorrectly accounted for in skmsg objects. The fix replaces manual bookkeeping with sk_msg_free_partial, ensuring consistency across iterations and correcting accounting anomalies that occurred when the full message was not sent. This flaw could lead to resource leaks or inaccurate accounting within the kernel, potentially affecting system stability or correctness.

The affected product is the Linux kernel. No explicit version range is provided, but the commit that adds sk_msg_free_partial appears in all recent kernel releases that include the espintcp patch. All distributions that ship the Linux kernel are potentially impacted until the patch is incorporated.

The CVSS score of 9.8 signifies a critical severity, but the EPSS score of less than 1% indicates a very low probability of exploitation. The defect resides in internal kernel accounting logic, so exploitation would require local privileged access or kernel memory manipulation, and no known exploits are documented. Consequently, the risk remains uncertain, but the low EPSS score suggests a modest likelihood of real‑world exploitation.