The vulnerability resides in the Linux kernel’s krb5 crypto library and the AF_RXRPC protocol stack. It stems from the absence of length checks before decrypting or verifying a message. A malformed packet with an excessively large payload can trigger a buffer overflow in kernel space, potentially corrupting memory or causing a kernel crash. The CVE description does not explicitly mention privilege escalation; it merely indicates the possibility of kernel memory corruption or a denial of service. Based on the description, it is inferred that an attacker who can send arbitrarily large packets to the AF_RXRPC service may be able to exploit this flaw. No direct evidence is provided that privilege escalation is achievable, so those claims are not asserted.

All installations of the Linux kernel that include the krb5 crypto library and the AF_RXRPC network protocol stack are potentially affected. The advisory does not list specific kernel releases; however, any version built before the commit that adds pre‑decryption/pre‑verification length checks (see the referenced git commit) is likely vulnerable. The risk applies regardless of system configuration unless the AF_RXRPC interface is disabled.

The CVSS score of 7.5 reflects a moderate‑to‑high severity for a memory corruption flaw that can lead to a denial of service. The EPSS score is less than 1 %, indicating that exploit attempts are expected to be rare. The vulnerability is not currently listed in the CISA KEV catalog. Remote exploitation is possible by sending specifically crafted packets to the target’s AF_RXRPC service; systems that enable RxGK encryption for that protocol are particularly exposed.