The kernel function that handles the addition of mesh routing paths allocates a reservation slot before performing allocation and table insertion. When the allocation fails or a duplicate destination is detected the function returns without releasing the reservation. The result is that the global counter for the maximum number of mesh paths, MESH_MAX_MPATHS, is permanently decremented. After enough failures the counter reaches zero and no new paths can be created, starving the network of routes and effectively blocking further mesh communication. This flaw is an instance of uncontrolled resource consumption (CWE‑400).

All systems running the Linux kernel with the mac80211 wireless subsystem that supports mesh networking are affected. Because no specific version range is listed, any kernel release prior to the commit that introduced the fix is vulnerable. The affected product is the Linux kernel, identified in CPE as cpe:2.3:o:linux:linux_kernel:*.

The vulnerability is a denial‑of‑service condition with a CVSS score not reported and an EPSS score not available. Nevertheless the flaw is feasible to exploit from any device that can inject duplicate or failed mesh path addition requests over the wireless network, which could be local or remote depending on the network topology. As it does not involve privilege escalation or code execution, the primary impact is loss of connectivity. The kernel patch releases the reservation on failure, eliminating the exhaustion risk. The flaw is not listed in CISA KEV, but upgrading remains the advised response.