The vulnerability involves a missing check for a non‑zero return value in the nft_meta_bridge kernel module, which can result in a stack leak of kernel memory contents. The CVE description notes that this bug is fixed by testing for a non‑zero return value. Based on the description, it is inferred that the stack leak may occur when the module processes network packets, although the exact packet format is not specified. This flaw is categorized as a stack‑based information disclosure, consistent with CWE-562.

All Linux kernel releases that lack the nft_meta_bridge stack leak fix, according to the Linux kernel vendor. No specific version range is listed, so any kernel prior to the patch is potentially affected.

The CVE has a CVSS score of 5.5 and an EPSS score of less than 1%, indicating moderate severity and a low probability of exploitation. The CVE description does not state the exact method of exploitation. Based on the description, it is inferred that an attacker could trigger the flaw by sending a network packet that causes the kernel module to invoke the function with an unchecked return value. This inference is not explicitly asserted by the CVE data. No public exploits are known and the vulnerability is not listed in CISA's KEV catalog. Because the stack leak can expose sensitive data, remediation is advised.