The Linux kernel vulnerability causes the skb metadata, which is used to pass information between XDP and tc, to be overwritten or cleared during Layered Tunneling (LWT) encapsulation. When a forwarded packet carries XDP metadata, the encapsulation process moves the packet data pointer and can overwrite the headroom or trigger a warning that clears the metadata. This results in corrupted or lost packet metadata, which can lead to incorrect packet processing, kernel warnings, or even crashes, effectively rendering the system unstable for affected traffic streams.

All Linux kernel implementations are potentially affected, as the issue is present in the generic net subsystem. No specific version ranges are listed in the input, but the patches referenced are from the 6.18 series. Administrators should check that their kernel is beyond the commit dates of the provided patches and have not been built with legacy LWT configurations that enable redirect modes or BPF forwarding.

The severity is not quantified in public CVSS or EPSS metrics, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be network-based: an attacker who can inject or forward traffic that reaches the LWT encapsulation path could trigger the metadata overwrite, potentially causing a denial of service. While no public exploits are documented, the nature of the bug could allow an attacker to destabilize the host if the kernel is exposed to malicious traffic streams.