The Linux kernel’s IP Virtual Server (IPVS) subsystem had a flaw where the IPv4 Internet Header Length (IHL) field was not revalidated after packet fragments were read from the socket buffer. During packet processing, an attacker could manipulate the IHL field to an unrealistic value. The checksum routine, ip_send_check, would then reference memory beyond the packet boundaries, causing an out‑of‑bounds memory access that can result in a kernel crash, thus disabling the system or its networking stack.

Any Linux kernel that includes the IPVS module with the unpatched code is potentially vulnerable. The advisory does not list specific kernel versions, so all releases before the upstream fix should be considered at risk until the kernel is updated.

With a CVSS score of 7.8 the vulnerability is classified as high severity. The EPSS score is not available, and it is not listed in the CISA KEV catalog, indicating no known widespread exploitation. Exploitation requires an attacker to craft packets with a modified IHL value, which implies at least local or privileged access to inject such packets. The lack of a public exploit example suggests that the risk remains moderate to high for environments where local malicious code can be introduced, but it does not represent a straightforward remote attack vector.