In the Linux kernel, the RXRPC subsystem incorrectly processes RESPONSE packets after a service challenge has ended. The flaw allows a malicious host to send duplicate or late RESPONSE frames that trigger the re‑execution of the connection‑setup routine, bypassing the normal secure‑initialization checks. The result is that the kernel can be forced to misconfigure or reset an RXRPC service channel, which may cause repeated resource consumption or misbehaving connections, effectively denying service to legitimate clients.

Any Linux kernel that contains the unpatched RXRPC code is potentially affected, regardless of distribution. The advisory lists kernel commits that apply the fix; affected releases include any mainline kernel prior to the patch and the forthcoming stable series. System administrators should verify the current kernel version against the commit refs provided in the advisory.

The CVSS score of 7.5 classifies it as high severity. The EPSS probability is less than 1% indicating a low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Attackers would need network access to the target and the ability to craft specific RXRPC RESPONSE packets, so the vector is remote network. Because the flaw can lead to denial of service, the potential impact is availability degradation of affected services.