The vulnerability is an out‑of‑bounds write in the Linux kernel’s drop_monitor reset_per_cpu_data() routine. The code calculates a buffer length that includes the netlink attribute header but zeroes that many bytes starting at the payload, causing a four‑byte overflow that corrupts the skb_shared_info structure. This buffer overflow (CWE‑787) could lead to kernel memory corruption, potentially causing a system crash or, based on the description, it is inferred that an attacker may need to control surrounding context to exploit the overflow, potentially enabling arbitrary code execution.

Any Linux kernel that contains the drop_monitor component before the commit that introduced the fix is affected. This includes all upstream kernel releases that have not yet applied the patch. No specific version range is provided, so if you are using a kernel built from the mainline tree, verify that the offending commit is absent.

The CVSS score of 7 reflects a medium severity vulnerability. The EPSS score of less than 1 % indicates a very low likelihood of exploitation in practice, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that resetting per_cpu_data() requires sending a netlink message to the drop_monitor interface, which generally requires root or kernel‑level privileges. If an attacker gains such access, they could trigger the overflow, potentially causing a crash or enabling kernel‑level code execution.