The vulnerability occurs in the Linux kernel’s XDP zero‑copy (xsk) transmit path. When the kernel’s zero‑copy Tx batch parser encounters an invalid descriptor, it stops parsing and may advance the transmit consumer past fragments that are neither submitted to the driver nor returned to userspace through the completion ring. A second, similar flaw arises when a packet exceeds the xdp_zc_max_segs limit; descriptors up to the limit are released without completion, and the remaining descriptors can be mistakenly interpreted as the start of a new packet. These behaviors result in UMEM frames being lost, completion‑queue ordering violations, and a loss of network traffic, affecting data integrity and temporary disruption of the networking stack.

The affected product is the Linux kernel, specifically any build that includes the XDP zero‑copy transmit (xsk) subsystem. The CVE entry does not specify exact version information, so all kernel releases containing the vulnerable code may be impacted until the patch is applied.

The EPSS score is <1% and the vulnerability is not listed in the CISA KEV catalog, indicating a low exploitation probability. The CVSS score of 5.5 indicates moderate severity. The impact involves loss of UMEM frames and potential disruption of network traffic due to ordering violations in the completion queue. Exact exploitation conditions are not disclosed in the public data, so the specific attack vector remains unspecified. Nonetheless, the moderate CVSS score and low EPSS suggest that while exploitation is not imminent, the potential effect on network integrity and availability should be considered noteworthy.