The kernel bug allows a mix of net_iov and page-backed fragments when assembling a socket buffer, which can cause a stack overflow that results in a kernel panic. This crash brings the entire system down, terminating all kernel operations and rendering the host unavailable to legitimate workloads. The flaw is a classic buffer access misuse, classified as a remote denial‑of‑service vulnerability.

All Linux kernel implementations are potentially affected because the vulnerability resides in core networking code and no specific kernel release is listed. Systems running kernel versions that do not yet include the patch, identified in the advisory as the fix for devmem zero‑copy handling, could be impacted until the update is applied.

Based on the description, it is inferred that the vulnerability can be triggered by specially crafted network traffic that forces the kernel to mix net_iov and page-backed fragments during zero-copy operations. The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% reflects a low exploitation probability. The flaw is not currently listed in the CISA KEV catalog, suggesting no known active exploitation. Because the bug is triggered within kernel networking internals, the attack can be performed remotely via malicious traffic patterns and is typically considered a remote denial‑of-service vulnerability.