The Linux kernel’s nvmem onie‑tlv layout parser enters an infinite loop when it encounters an unknown type entry (for example type 0x41). The loop never advances the parsing offset, causing the driver to stall and subsequently the system to hang until reset. This flaw is catalogued as CWE‑835 and represents a local denial‑of‑service condition.

All Linux kernel builds that ship with the legacy onie‑tlv layout parser and have not yet incorporated the offset‑increment update are affected. The issue resides in the onie‑tlv driver that parses EEPROM entries on embedded boards.

The EPSS score of <1% indicates a very low probability of exploitation. The flaw is not listed in CISA’s KEV catalog. The supplied description does not explicitly state an attack vector; based on the details, it is inferred that an attacker would need to control the EEPROM contents—a local or on‑board manipulation—to introduce an unknown entry type. If such a manipulation occurs, the driver would loop, consuming processing resources and potentially causing a system hang, resulting in denial‑of‑service.