The Linux kernel’s net/sched act_api contains a reference‑management flaw where a batched DELACTION request may leave dangling references if a deletion fails. These unreleased references accumulate for actions that are still bound to a filter, causing later deletion attempts to succeed incorrectly and leaving the original action object in the identifier database. Although the flaw is a kernel‑level memory leak, repeated exploitation could deplete kernel memory and destabilize the system, effectively providing a denial‑of‑service vector when the leak reaches critical size. Based on the description, it is inferred that only privileged users can issue delaction requests.

All Linux distributions that ship an unpatched kernel containing the net/sched act_api code are susceptible. The flaw exists in the core kernel source and is not tied to a particular kernel release; any kernel that has not yet incorporated the commit introducing proper tail‑reference cleanup is affected.

The CVSS score of 5.5, but the EPSS score of under 1% indicates that attacks on this vulnerability are expected to be very rare. Based on the description, it is inferred that privileged access is required to issue delaction requests, making it likely a local rather than remote risk. Nonetheless, the potential for progressive memory exhaustion means that the risk to a system that remains vulnerable can grow over time if the flaw is repeatedly triggered.