A memory leak vulnerability in the Linux kernel igbvf driver could lead to resource exhaustion and potential system instability.

This vulnerability is a memory leak caused by an off-by-one error in the igbvf driver during TX DMA error handling. When a mapping failure occurs, the driver fails to correctly unmap all previously mapped buffers for a socket buffer (skb), leading to DMA mapping leaks.

Successful exploitation of this vulnerability can result in kernel memory exhaustion, which may lead to system-wide denial of service conditions. While the CVSS score is 9.8, the impact is primarily focused on system availability through resource depletion rather than direct remote code execution, though such stability issues can cause significant operational downtime in critical infrastructure.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.151, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system performance and kernel logs for recurring DMA or driver-related errors that may indicate resource exhaustion or driver instability.

Compensating Controls: Ensure that systems using the igbvf driver are isolated within restricted network segments to minimize the potential for triggering error conditions via external traffic.

Public Exploit Available: Unknown

Organizations should prioritize patching their Linux kernel environments to the specified fixed versions to prevent potential memory leakage and subsequent system instability. Given the low-level nature of kernel vulnerabilities, applying these updates during the next scheduled maintenance window is recommended to maintain system integrity and operational reliability.