Impact
Based on the description, the vulnerability originates in the Linux kernel’s handling of hardware packet parsing during transmission. The driver lacks proper bounds checking when processing incomplete or malformed IPv4, IPv6, TCP, or UDP headers, leading the hardware parser to overread packet data. This mismatch can trigger a transmit (TX) hang, effectively blocking the networking stack and causing a denial of service. The likely impact is that a malicious actor can cause a DoS by sending crafted packets that result in a hardware TX hang, which will lock the network interface until it times out or the system is reset.
Affected Systems
Affected systems include all Linux kernel users that have not applied the rtase TX hang workaround. Vendors noted are generic Linux distributions, covering any kernel image before the patch that drops malformed packets and pads transport data for fragments and PTP‑eligible packets. No specific version information is listed, so any kernel not containing the recent rtase changes is potentially vulnerable.
Risk and Exploitability
Based on the description, the likely attack vector is the transmission of specially crafted network packets that trigger the hardware packet parser to overread and cause a TX hang. The EPSS score indicates a very low exploitation probability (< 1%), and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 7.5 reflects high severity, though public exploits have not been confirmed. The attacker must have the ability to send packets that the kernel forwards to the hardware, which is typical for network-facing hosts.
OpenCVE Enrichment
Debian DLA