In the Linux kernel Ethernet driver, oversubscribed traffic could lead to a buffer overflow that triggered an assertion during skb_put, potentially causing a kernel panic and disrupting network service. The patch adds a tail‑room check before allocating the sk buffer, abandons the frame when insufficient room is available, and treats buffer allocation errors as recoverable. This change mitigates the risk of a local denial‑of‑service by preventing the driver from crashing, addressing a classic buffer‑overflow weakness (CWE‑120).

The affected product is the Linux kernel, specifically the Ethernet driver driver for oa_tc6. No specific kernel version is listed; the fix applies to all kernel releases that contain the patch in the referenced commit history.

The CVSS score is not provided, and the EPSS score is unavailable, so a quantitative risk assessment is not possible. The vulnerability was not listed in the CISA KEV catalog, indicating that no mass exploitation has been observed. The fix reduces the likelihood of a kernel crash, but if an attacker can trigger the oversubscribed traffic scenario locally, the attacker might still be able to cause a denial‑of‑service until the patch is applied. The precise attack vector and likelihood remain unquantified.