An error in the Linux kernel function that copies network packet data fails to clear any unused portions of a buffer when it encounters unreadable fragments. The result is that residual data from earlier memory, which was never initialized or zeroed, is sent in packets such as ICMP error messages or driver transmit buffers. Receiver side packets are normally dropped due to checksum mismatches, yet the stale data is exposed before validation. This flaw could allow an attacker to glean sensitive memory contents from the target kernel.

All Linux kernel builds, as the affected function resides in the core networking stack. Specific version information is not supplied, so any kernel prior to the patch that implements zeroing after copying is susceptible. Vendors identified as Linux:Linux indicate the flaw exists across the open‑source distribution.

The CVSS score of 7.5 indicates a moderate‑to‑high severity vulnerability. The EPSS score is < 1%, and the vulnerability is not listed in CISA KEV. An attacker would need to trigger the flawed copying routine, most likely by sending crafted network frames to a vulnerable host. While the modality suggests potential for data exposure, no public exploit has been reported, and exploitability may be limited by the need for specific packet conditions and kernel version awareness.