This vulnerability arises when the Linux kernel’s ipvlan driver fails to propagate the needed_headroom and needed_tailroom values from the underlying physical device. As a result, packet processing routines that rely on accurate headroom and tailroom calculations can overrun buffers when preparing headers or appending trailers. The ensuing memory corruption can trigger KASAN slab‑use‑after‑free crashes, excessive reallocations, or headroom underflow errors, which typically culminate in kernel panics or loss of network service.

The flaw is present in all Linux kernel releases that contain the ipvlan networking module and have not been updated to a version where ipvlan_init correctly copies needed_headroom and needed_tailroom from the physical device. Therefore any host running a kernel with active ipvlan support—whether in a standard distribution kernel or a custom build—may be affected.

A CVSS score has not been published, and the EPSS metric is unavailable, so the quantitative likelihood of exploitation is unknown. Nonetheless, the potential for a fatal kernel crash indicates a high severity from an availability perspective. The code path that miscalculates headroom is exercised during packet processing, so it is inferred that an attacker with network or local access could craft traffic to an affected ipvlan interface to trigger the flaw, possibly leading to denial‑of‑service or repeated crashes. The vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog.