An accounting flaw in the Linux kernel Xilinx axienet driver allows unauthenticated attackers to cause a denial of service through transmission queue stalling.

This is a denial of service vulnerability within the network driver subsystem, specifically affecting the Xilinx axienet network driver, where improper byte queue limit accounting allows unauthenticated remote attackers to stall the transmission queue.

Successful exploitation of this vulnerability leads to a denial of service by permanently stalling the transmission queue on affected network interfaces. This can disrupt critical network communications, impact service availability, and cause unplanned downtime for dependent systems. Although the CVSS score is 7.5, indicating high severity due to the potential for service disruption, the primary impact is limited to availability without compromising confidentiality or integrity.

Immediate Action: Apply the vendor security updates immediately by updating the Linux kernel to version 6.18.22, 6.19.12, or later where the fix is integrated.

Proactive Monitoring: Monitor network interface statistics for unusual traffic patterns, dropped packets, or stalled transmission queues that may indicate resource exhaustion.

Compensating Controls: Implement network-level rate limiting and monitor system logs for driver errors related to the Xilinx axienet interface if immediate patching is not feasible.

Public Exploit Available: false

Given the high severity of potential denial of service conditions, administrators must prioritize applying the latest kernel patches to affected systems. Updating the Linux kernel to the fixed versions ensures that byte queue limit accounting functions correctly and prevents transmission queue stalling.