AF_XDP in the Linux kernel accepts a transmit (TX) metadata length as small as eight bytes. Because every supported request requires the flags field plus at least one eight‑byte data field, allowing smaller buffers permits the kernel to read beyond the registered metadata area. This buffer overread can expose data that should be protected or cause a kernel fault. The weakness is a classic memory overread (CWE‑119).

The issue affects all Linux kernel releases that include the AF_XDP driver and do not enforce a 16‑byte minimum for TX metadata. No specific kernel patch level is identified in the advisory, so all builds prior to the commit that added the 16‑byte requirement are considered vulnerable. The vulnerability is limited to systems that use AF_XDP sockets.

The EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog, so no current evidence of exploitation exists. Nonetheless, an attacker who can construct an AF_XDP request with undersized TX metadata could trigger the out‑of‑bounds read. Depending on the memory contents accessed, this could lead to information disclosure or a kernel crash, potentially elevating privileges if the environment permits. The final risk assessment cannot be quantified without a CVSS score, but the potential impact on confidentiality, integrity or availability warrants timely remediation.