The vulnerability originates in the ntb_netdev driver when it hands a received skb to the network stack before allocating a replacement skb. If that allocation fails, the original packet is not reposted, causing the interface's RX queue depth to shrink. With repeated failures, the queue can become empty and receive traffic stalls, effectively denying service on the affected network interface. The weakness is a failure to preserve resource state after allocation failure, consistent with resource exhaustion.

The flaw is present in the Linux kernel's ntb_netdev driver. No specific kernel version is listed in the data; affected systems include any host running a Linux kernel that includes this driver before the patch. Systems with the ntb_netdev network bridge or NIC card exposed to external traffic are most susceptible.

No CVSS or EPSS score is available, and the vulnerability is not listed in CISA KEV. The description implies a denial‑of‑service attack vector that could be triggered by sustained high traffic or deliberate memory exhaustion. Since the fix is internal to the kernel and no workaround is reported, the risk is considered high for installations that expose the ntb_netdev interface to untrusted sources.