The vulnerability originates in the mlx5e driver of the Linux kernel, where the driver defers releasing XSK buffers until an MPWQE is refilled. If an XSK allocation fails, the driver does not advance the work queue head and a later NAPI poll retries the same WQE, resulting in the same buffers being freed twice through stale pointers. This double free can corrupt kernel memory and potentially allow an attacker with control over AF_XDP traffic on a Mellanox device to trigger a kernel crash or arbitrary code execution. The issue was exposed by fault injection that forced multiple allocation failures, demonstrating that the error path is not idempotent and can lead to invalid memory operations.

All Linux kernel users whose systems load the mlx5e (Mellanox Ethernet) driver and use AF_XDP with a striding receive queue are affected. No specific kernel version range is listed, but the problem exists in any kernel build that includes the vulnerable code prior to the patch commit referenced in the advisory. Version information is not provided, so administrators should review the commit history and identify their kernel version.

The CVSS score is not provided, and no EPSS score is available, which indicates limited public data on exploitability. Because the flaw involves a double free in the driver, a successful exploitation could lead to denial of service or privilege escalation if an attacker can control AF_XDP traffic. The vulnerability is not listed in the CISA KEV catalog, suggesting no currently known exploitation campaigns. Consequently, the risk remains significant for exposed systems but limited to scenarios where an attacker can influence AF_XDP traffic on Mellanox network interfaces. Detailed exploitation would require repeated allocation failures and careful timing to trigger the double free, making it a difficult but potentially high‑impact attack.