In the Linux kernel Xilinx AXI Ethernet driver, the device pre-allocates receive buffers and keeps track of in‑flight transmit buffers whose socket buffers (SKBs) are DMA‑mapped. During the device shutdown sequence, the driver stops the DMA engine without following up on pending buffer completions, freeing only the ring descriptors and leaving the SKBs still lodged in the DMA engine. These unmapped buffers are then leaked, and the memory mapping associated with them is not released until the next interface teardown. With a sufficient number of pre‑posted receive buffers, the cumulative leakage can exhaust the limited IOMMU aperture, causing the kernel to become unstable or perform poorly due to resource starvation.

All Linux systems that include the Xilinx AXI Ethernet (axienet) driver are affected. The CVE description does not specify a kernel version range, so any kernel lacking the patch that releases DMA buffers on interface stop is potentially vulnerable.

The CVSS score is 4.1, the EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that local kernel privileges are required to trigger a reset of the network interface—such as through an ifdown command. When the driver is stopped while buffers are still mapped, the kernel may consume all available IOMMU pages, resulting in buffer exhaustion and a possible denial‑of‑service.