A memory management flaw in the Linux kernel ntb_netdev driver allows unauthenticated remote attackers to trigger a denial of service by exhausting RX queue buffers.

This is a resource exhaustion vulnerability within the ntb_netdev_rx_handler function, where failed memory allocations cause the driver to permanently drop buffers from the RX queue. This flaw can be triggered by an unauthenticated attacker, resulting in a total stall of network reception for the affected interface.

Successful exploitation results in a persistent denial of service for the network interface using the NTB (Non-Transparent Bridge) driver, which can lead to significant system downtime and service disruption. With a CVSS score of 7.5, the vulnerability poses a high risk to availability, particularly in high-throughput environments relying on NTB for inter-processor communication.

Immediate Action: Update the Linux kernel to version 5.10.267, 5.15.218, 6.1.185, 6.6.154, or newer, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs and network interface statistics for errors related to buffer allocation failures or unexpected interface stalls.

Compensating Controls: If immediate patching is not feasible, restrict access to the affected network interfaces and limit the traffic volume processed by the ntb_netdev driver to reduce the likelihood of memory allocation failure.

Public Exploit Available: Unknown

Given the potential for service disruption, administrators should prioritize the application of kernel updates that include the fix for this buffer management issue. Testing the update in a staging environment is advised to ensure compatibility before deploying to critical production infrastructure.