Linux Kernel CVE-2026-57224

Exploitation requires the ability to generate DHCP traffic (UDP port 67/68) toward the target system, or to create network conditions where the kernel's DHCP transmit path operates unidirectionally without reciprocal traffic to trigger cleanup. DHCP is a link-local protocol by default, so the most direct path to exploitation is from the same Layer 2 network segment. If the target is a DHCP server or relay, broader network access may apply. Limiting factors: DHCP is typically not routed across network boundaries without relay configuration, restricting remote exploitation to environments with DHCP relay agents. No authentication is required for DHCP traffic at the protocol level.

With no CVSS vector, EPSS score, or KEV status provided, risk quantification relies on structural analysis of the vulnerability class. Resource exhaustion via unbounded tx growth is a DoS-class defect - no confidentiality or integrity impact is expected. Exploitability depends on the ability to generate or simulate unidirectional DHCP traffic reaching the kernel subsystem, which on a network-facing machine requires no authentication for DHCP. The attack surface is constrained by network topology: DHCP is typically link-local (UDP broadcast/multicast), meaning exploitation is most straightforward from the local network segment. Even a mid-sized municipal IT team in mielec should treat this as a priority for edge and infrastructure systems handling DHCP, since memory exhaustion on a DHCP server or relay would disrupt address assignment across the entire subnet. Without CVSS, EPSS, or KEV data, risk cannot be scored with confidence and defenders should consult Ubuntu's security advisory directly for triage guidance.

An attacker on the same local network segment sends a flood of DHCP request packets without completing the handshake, creating a unidirectional traffic pattern toward the target kernel's DHCP subsystem. The transmit path accumulates tx structures without releasing them, progressively consuming kernel memory. Over time, memory exhaustion causes the host to become unresponsive or crash, resulting in denial of service.