The vulnerability allows unprivileged applications to set the Loose Source and Record Route (LSRR) and Strict Source and Record Route (SSRR) IP options without the CAP_NET_RAW capability. By forcing packets to be routed through attacker‑controlled nodes, an adversary can observe TCP initial sequence numbers and potentially other protocol data, leading to covert channel attacks and network reconnaissance. The flaw is a classic instance of improper access control, enabling privileged network behavior by users with no required privilege.

Affected systems are any deployments of the Linux kernel, as indicated by the kernel CPE string. No specific versions are enumerated in the available data, so any kernel that has nots IPOPT_SSRR and IPOPT_LSRR options remains vulnerable.

The CVSS score is not provided in the data, and the EPSS score is unavailable, implying that the exploitation probability is not quantified. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The likely attack vector is local: it requires a user process to send packets with these options, a capability normally restricted to privileged users. Given the potential for widespread impact if present on a system that forwards such packets, the risk level is considered high to medium depending on local network filtering policies.