The Linux kernel’s netfilter synproxy code directly reads and writes TCP timestamp fields without using alignment‑safe helpers. On architectures that enforce strict data alignment, these unaligned accesses can trigger a kernel crash or cause noticeable performance degradation, leading to a denial‑of‑service condition. The flaw does not enable privilege escalation or arbitrary code execution.

Any Linux kernel that includes the netfilter synproxy component and has not incorporated the alignment‑safe timestamp handling is potentially affected. The CVE does not specify a limited version range, so all kernels lacking the patched code are at risk, including vendor distributions, custom builds, and container images that ship a full kernel with synproxy enabled.

The CVSS score of 7.5 classifies the vulnerability as high severity; the EPSS score of less than 1% and absence from the CISA KEV catalog indicate a low probability of exploitation in the wild. The likely attack requires crafted SYN packets containing TCP timestamp options that exercise the vulnerable code path on strict‑alignment systems, resulting in a kernel crash or service disruption rather than privilege escalation.