The vulnerability in the Linux kernel’s TCP implementation allows a non-exact in-window RESET (RST) packet received while a socket is in the SYN-RECEIVED state to remove the request socket instead of generating the required challenge ACK. This protocol deviation can cause legitimate connections to be prematurely dropped, resulting in an interruption of network services. The flaw does not enable arbitrary code execution or credential compromise; it is a denial‑of‑service (DoS) weakness that disrupts normal TCP handshakes.

All Linux kernel releases, as the affected code resides in the generic Linux kernel source tree. No specific version range is listed in the advisory, so any kernel that has not yet incorporated the patch may be vulnerable.

The CVSS score is not provided, and the EPSS score is unavailable. The vulnerability is not listed in the CISA KEV catalog, indicating no active, publicly known exploits are documented. Nevertheless, the flaw can be triggered with a crafted RST packet, which an attacker can send over the network to any host hosting the vulnerable kernel. The absence of a requirement for a local attacker or special privileges means the risk is primarily tied to the availability of the target’s network interface and the ability to forge TCP packets.