The vulnerability in the Linux kernel’s TCP implementation occurs when a non‑exact in‑window RST packet is received while a socket is in the SYN‑RECEIVED state. Instead of generating the mandated challenge ACK, the code incorrectly removes the request socket. This protocol deviation causes legitimate TCP connections to be prematurely dropped, resulting in a denial‑of‑service condition. The CVE description does not describe privilege escalation or code execution; based on the available information we infer that the impact remains limited to DoS.

All Linux kernel releases that have not yet integrated the patch are affected. The defect resides in the generic Linux kernel source tree, so any distribution or custom build without the referenced commit series is at risk. No specific version range is listed, implying that all unpatched kernels are potentially vulnerable.

The CVSS score of 8.2 indicates high severity, while the EPSS score of < 1% suggests a low probability of exploitation. The vulnerability is not listed in CISA KEV, indicating no known active exploits. The CVE description does not mention privilege escalation or code execution, and based on the available information we infer that such capabilities are not part of the vulnerability. An attacker needs to craft and send a forged RST packet over the network; the description thus infers a remote network packet injection vector where the packet must be an in‑window RST with a non‑exact sequence number. If accepted, the target’s TCP connection is disrupted, leading to service downtime.