The Linux kernel contains a bug in the virt_wifi component where, when a simulated Wi‑Fi link is disconnected, the transmit function returns NET_XMIT_DROP without freeing the skb. Each packet sent while disconnected leaks its packet buffer into kernel memory. This leak can accumulate, exhausting memory and triggering out‑of‑memory handling, resulting in a denial of service.

The flaw resides in the virt_wifi module of the Linux kernel. All kernel builds that include this component and have not applied the patch are affected. No specific version ranges are provided, so any kernel with virt_wifi present is vulnerable.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is below 1% and the vulnerability is not listed in CISA KEV, suggesting a low likelihood of exploitation. The bug increases kernel memory usage, so the primary risk is DoS. The vulnerability is local. Based on the description, it is inferred that an attacker would need access to a virt_wifi interface and would need to trigger disconnections while packets are being transmitted to induce the memory leak.