In the Linux kernel Ethernet driver, oversubscribed traffic could lead to a buffer overflow that triggered an assertion during skb_put, potentially causing a kernel panic and disrupting network service. The patch adds a tail‑room check before allocating the sk buffer, abandons the frame when insufficient room is available, and treats buffer allocation errors as recoverable. This change mitigates the risk of a local or remote denial‑of‑service by preventing the driver from crashing, addressing a classic buffer‑overflow weakness (CWE‑617).

The affected product is the Linux kernel, specifically the Ethernet driver for oa_tc6. No specific kernel version is listed; the fix applies to all kernel releases that contain the patch in the referenced commit history.

The CVSS score is 5.5 and the EPSS score is < 1%, indicating a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, so no widespread exploitation has been reported. Because the description references oversubscribed traffic causing a buffer overflow in the driver, it is plausible that an attacker could trigger the issue by sending excessive traffic from a remote source, leading to a kernel panic and denial‑of‑service. However, the exact attack vector is not explicitly documented, so this assumption is inferred from the nature of the vulnerability and the network context in which the driver operates.