The ENA network driver creates XDP transmit queues before it establishes the regular transmit path. When the subsequent allocation of regular TX queues fails, the cleanup code does not destroy the unfinished XDP queues, resulting in persistent allocations and a resource leak. An attacker that can repeatedly trigger this failure path may exhaust kernel memory or queue resources, eventually bringing the network function or the host to a degraded state or complete failure. The weakness is a classic resource leak, identified as CWE‑767.

All Linux kernel releases that include the ENA driver are impacted, from early 6.13‑rc1 through 7.1‑rc7. The vulnerability is present in any distribution kernel that has not yet applied the upstream patch; the affected component is the Linux kernel subsystem net:ena. No specific vendor or patch version list is supplied, but any system using the ENA device and a kernel version between v6.13‑rc1 and v7.1‑rc7 is potentially vulnerable.

The CVSS score is not supplied, and the EPSS score is not available, indicating no publicly reported exploitation data. The vulnerability is listed in no KEV catalog. Because the flaw requires the failure of a kernel allocation routine, the attack vector likely requires a local or privileged context that can induce repeated TX path failures. The potential impact of a successful repeated failure is a denial of service by exhausting kernel resources, but no remote exploitation path has been documented. The risk is therefore primarily operational rather than immediate criticality, yet early patching is recommended to prevent possible DoS conditions.