An off‑by‑one bug in the igbvf driver causes a single DMA mapping to remain allocated when a TX buffer mapping fails after a successful mapping. The leaked mapping consumes kernel memory and NIC resources, and repeated failures could exhaust these resources, disabling further packet transmission and causing a denial‑of‑service. The flaw is a resource‑exhaustion bug (CWE-772).

The Linux kernel’s igbvf virtual function NIC driver is affected. Any kernel version containing the older buggy code before the recent commit is vulnerable, regardless of distribution. Devices using the igbvf driver but not other drivers that received an earlier fix are impacted.

Based on the description, it is inferred that an attacker would need to provoke repeated TX buffer mapping errors, which could be achieved with crafted or high‑volume network traffic or by inducing load. The likely attack vector is local or remote depending on the exposure of the network interface. The vulnerability is a resource‑exhaustion flaw, a denial‑of‑service without code execution. The EPSS score <1% indicates low exploitation probability, and the absence of a KEV designation suggests it is not known to be exploited in the wild. The CVSS score of 9.8 signals high severity. The overall risk is moderate if the system can see untrusted traffic, but remains low for isolated or hardened environments.