In the Linux kernel, the rxrpc_recvmsg() routine could enter an infinite loop when the out‑of‑band queue was not checked during its waiting phase, potentially consuming CPU resources and disrupting kernel operation, which could lead to denial of service by stalling packet processing.

The vulnerability affects Linux kernel implementations that include the rxrpc protocol prior to the patch commit, which addresses the loop condition. Any kernel version lacking the update containing commit 0fc5b37faec26241d3cbee732e29ac35ad3184f8 (and related changes) may remain susceptible.

The CVSS score of 7.5 indicates a high severity, while the EPSS score of < 1% suggests a very low probability of exploitation in the wild. The flaw is not listed in the CISA KEV catalog, so publicly documented exploitation data is limited. The nature of the bug implies a denial‑of‑service impact; an attacker would need the ability to send crafted rxrpc traffic, which suggests a network‑based or local privilege attack vector, but the exact exploitation conditions are not described in the source data. The risk is therefore considered moderate to high for unpatched systems due to the potential for service interruption.