The kernel bug allows the mixing of net_iov and page‑backed fragments when building a socket buffer, which can cause a stack blow up. The resulting crash brings the system down, terminating kernel operations and rendering the host unavailable to legitimate workloads. This is a classic kernel memory misuse flaw, classified by the advisory as a local denial‑of‑service vulnerability.

All Linux kernel implementations, since the issue resides in core networking code and no specific kernel release is mentioned in the advisory.

The CVSS score is not provided, and the EPSS score is unavailable, so the exact severity cannot be quantified. However, the report indicates the flaw results in a kernel panic when the improper mix occurs. Because the bug is triggered by kernel internals handling network data, it is generally considered a local exploit that could be invoked by processes with elevated privileges or by abusive traffic patterns. There is no current evidence that the vulnerability is actively exploited, and it is not listed in the CISA KEV catalog.