The Linux kernel's NTB transport function ntb_transport_tx_enqueue() was intended to drop packets when the QP link is down by returning a failure code. However, it incorrectly returned 0 (success) without consuming the packet buffer, causing the network device layer to believe the packet was transmitted successfully and thus leaking one socket buffer (skb) per transmit attempt racing the link-down. The fix returns -ENOLINK on such failures, ensuring the caller retains ownership of the buffer and enabling proper freeing of the skb, preventing memory leaks and avoiding busy retry loops.

This vulnerability causes memory leaks in the kernel when packets are transmitted while the QP link is down. Over time, this could lead to resource exhaustion affecting system stability. There is no indication of direct remote code execution or privilege escalation. No known exploits in the wild have been reported.

A patch has been applied to the Linux kernel to fix this issue by correcting the return value of ntb_transport_tx_enqueue() to -ENOLINK when the QP link is down. Users should update to a kernel version that includes this fix. Since this is a kernel-level issue, applying the official patch or upgrading the kernel is the recommended remediation.