An unauthenticated memory leak vulnerability in the Linux kernel NTB transport layer allows for a denial of service attack by triggering system resource exhaustion.

The vulnerability resides in the ntb_process_tx function within the NTB transport driver, where oversized buffers are not correctly managed. An unauthenticated attacker can trigger this flaw by sending specifically crafted network traffic, causing the kernel to leak socket buffers and eventually leading to system instability or denial of service.

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk. Successful exploitation results in system memory exhaustion, which causes service downtime and potential impact on critical infrastructure operations. Because the flaw is reachable without authentication, it represents a significant risk to the availability of any systems utilizing the NTB transport driver.

Immediate Action: Administrators should update their Linux kernel to the versions specified in the enrichment data (e.g., 6.12.109, 6.18.50, or 7.2.4) or the latest stable release provided by their distribution maintainer.

Proactive Monitoring: Monitor system logs for kernel memory exhaustion errors and unusual increases in memory usage associated with network interface drivers.

Compensating Controls: Ensure that network traffic to internal NTB-enabled interfaces is restricted to authorized sources using host-based firewalls or network segmentation to prevent malicious traffic from reaching the transport layer.

Public Exploit Available: Unknown

Given the potential for a denial of service and the high CVSS severity rating, patching is strongly recommended. Administrators should prioritize updating systems that utilize the NTB transport driver to the fixed kernel versions to prevent memory exhaustion and maintain service reliability.