The vulnerability resides in the ibmveth kernel module’s cleanup path during logical LAN registration. When registration succeeds but the allocation of RX buffer pools fails, the error handling bypasses the routine that frees the logical LAN, leaving the hypervisor with a reference to the buffer‑list page after it has been unmapped. This improper resource deallocation can cause resource leakage on the hypervisor, potentially leading to degraded performance or denial of service for virtual Ethernet operations.

All Linux kernel releases that compile the ibmveth module are potentially affected. No specific kernel version is listed, indicating that any kernel containing this code path could be vulnerable.

The CVSS score of 4.1 indicates a moderate severity, and the EPSS score of less than 1 % suggests a very low probability of exploitation. The flaw is not included in CISA’s KEV catalog. Based on the description, it is inferred that an attacker would need local privileged access or the ability to load the ibmveth module to trigger the failing registration path, making the vulnerability a kernel‑level defect that could be exploited for denial of service.