The bug in mrp_pdu_parse_vecattr causes the kernel to mis‑decrement the event counter and incorrectly consume bytes when the counter is a multiple of three. This results in spurious MRP events being applied to the applicant state, incorrect handling of empty attributes, and improper offset adjustment for subsequent PDUs. The mishandling can corrupt memory structures governing MRP state, potentially leading to data corruption or kernel crashes.

All Linux kernel implementations that support IEEE 802.1ak MRP, including all standard Linux distributions running the native kernel. No specific kernel version range is provided in the advisory, so the vulnerability is presumed containing the unpatched net/802/mrp subsystem.

Because the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the likelihood of exploitation is uncertain. An attacker would need to generate or inject malformed MRP PDUs (typically on a local or shared network segment that initiates MRP) to trigger the parsing defect. If successful, the flaw could allow denial of service or kernel memory corruption. The CVSS score is not supplied, so severity cannot be quantified in the advisory.