The vulnerability causes a memory leak in the Xen netfront driver when an incoming response chain contains more fragments than the socket buffer can handle. If xennet_fill_frags() fails, the partially constructed socket buffer—and the pages used as its fragments—are never freed, allowing repeated failures to accumulate untracked memory usage. The result is a gradual depletion of kernel memory that can lead to denial of service or system instability. This flaw does not provide direct code execution or privilege escalation; its impact is confined to resource exhaustion as described in CWE-401.

All Linux kernel distributions that include the Xen netfront networking component are potentially impacted. The Debian, Red Hat, Ubuntu and other Linux releases that ship the kernel version containing the Xen driver are affected. The specific kernel versions that contain the vulnerable code are not listed in the data, so affected users should verify whether their kernel contains the unpatched netfront implementation (commits 086944c1c2cbb683…, 5051df031144753d3e1886,…).

The CVSS score is not provided, and EPSS is not available, so the exact metric is unknown. However, the attack requires the ability to trigger the Xen netfront driver with a malformed response chain, which typically implies local or remote network traffic that the driver processes. Because the flaw leads to a gradual accumulation of unfreed memory, it can be classified as a moderate to high risk denial‑of‑service vulnerability. The vulnerability is not listed in CISA KEV, suggesting no confirmed exploitation in the wild. Administrators should treat the issue as a potential DoS vector and prioritize updating the kernel as soon as the patch is available.