The Linux kernel atlantic driver had a flaw in its TX ring deinitialization process where aq_vec_deinit() only freed up to 256 descriptors and stopped at a hardware head pointer that no longer moved after stopping hardware and NAPI. This caused stranded TX buffers and XDP frames to remain unreleased when the interface went down, resulting in silent memory leaks. With the RX path's page_pool conversion, stranded XDP_TX frames kept fragment references alive indefinitely, preventing page_pool_destroy() from completing and causing repeated warnings about stalled pool shutdown. The fix reintroduced aq_ring_tx_deinit() for teardown, extending it to release xdp_frames properly using xdp_return_frame() in process context.

The vulnerability causes memory leaks on every network interface down event under TX or XDP_TX load conditions. This can lead to resource exhaustion over time, stalled page pool shutdowns, and persistent warnings in system logs. While no active exploits are known, the leak degrades system stability and resource availability during network interface resets or XDP detach operations.

A fix has been implemented in the Linux kernel to properly free stranded TX buffers and XDP frames during ring deinitialization by restoring and extending the aq_ring_tx_deinit() function. Users should apply the official kernel updates that include this fix once available. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the current remediation guidance.