The vulnerability is a failure to validate the number of grant identifiers requested before allocating them in the kernel grant allocation mechanism. A request for a count exceeding the global grant limit is not rejected until after memory is allocated, allowing a user to trigger a large allocation that can exhaust kernel memory or cause a panic. The flaw arises from an unchecked input that permits integer wraparound during the count check, ultimately leading to uncontrolled resource consumption. The impact is a denial of service: an attacker can destabilize the kernel by exhausting memory or triggering a fault.

Linux kernel modules implementing grant table allocation are affected. The CVE description does not specify a version range; the flaw exists in the grant table allocation logic as implemented before the fix. All unpatched releases could be impacted, but the specific affected versions are not listed.

No CVSS score or EPSS value is available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack requires access to the Xen grant table ioctl interface, which is typically available to privileged users or within a Xen domain context. Because the flaw allows large allocations, exploitation is likely to succeed in an environment where the vulnerable process runs with sufficient privileges, though the exact vector is not detailed in the CVE description. The absence of exploitation statistics makes the precise likelihood uncertain, but the potential to consume kernel memory suggests a high impact if successful.