The Linux kernel's AF_XDP interface accepted TX metadata with a length as small as eight bytes, but every supported request requires flags plus at least one eight-byte request field. This insufficient length allowed the kernel to potentially read beyond the registered metadata area, posing a memory safety risk. The vulnerability was fixed by enforcing a minimum TX metadata length of 16 bytes, which aligns with the size of struct xsk_tx_metadata and maintains compatibility with applications that do not use launch-time metadata.

The vulnerability could lead to out-of-bounds memory reads in the kernel due to insufficient validation of TX metadata length in AF_XDP. This may result in information disclosure or kernel instability. However, no known exploits are reported in the wild at this time.

A fix has been implemented in the Linux kernel to require at least 16 bytes of TX metadata for AF_XDP. Users should update to a kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the exact fixed versions and remediation guidance.