The vulnerability resides in the PPPoATM module of the Linux kernel. During the pppoatm_send() operation, a 4‑byte LLC header is added after a check that only ensures there is enough headroom. The function does not confirm that the socket buffer header is writable, which can result in an attempt to write data to a non‑writable region. This memory corruption could lead to a kernel crash. No reporting of remote code execution or privilege escalation is present in the description.

All Linux kernel builds that include the PPPoATM feature are potentially vulnerable. The report does not specify a version range, so any kernel that implements this code path, particularly those that support PPPoATM bridging, may be affected. The known identifiers list only contains the generic Linux kernel entry.

The CVSS score is 7.0, the EPSS score is <1%, so the likelihood of exploitation is very low. Based on the description, it is inferred that a crafted PPP packet sent to a system with PPPoATM bridging could activate the code path and trigger the missing write‑on‑write check. The vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation. Operators should evaluate the risk based on their exposure to PPPoATM traffic.