The vulnerability arises from the xdr_buf_trim() function in the Linux kernel's SUNRPC component. The function incorrectly subtracts a length value from the buffer length field without clamping the result. When the caller pre‑sets of its iovecs, the subtraction can wrap, producing an inflated buffer length that propagates to downstream XDR decoders. This corruption can lead to out‑ a classic integer underflow that may enable arbitrary code execution or system compromise.

The flaw resides in the core Linux kernel, specifically the SUNRPC subsystem. Any kernel build that contains the affected xdr_buf_trim() code path is potentially impacted. While no explicit kernel version range is provided, the advisory references commit identifiers that patch the vulnerability; systems running older kernels before those commits are vulnerable. All Linux distributions that ship original kernel sources without the fix are at risk.

The CVSS score of 7.4 classifies this flaw as high severity. The EPSS score of < 1% indicates that the likelihood of exploitation is low. The flaw is not listed in the CISA KEV catalog. The underflow in xdr_buf_trim() can cause buffer length corruption which, if triggered via malicious SUNRPC traffic or crafted Kerberos tokens reaching the vulnerable routine, could enable an attacker to perform out‑of‑bounds reads or writes and potentially achieve arbitrary code execution is invoked during RPC traffic. No exploitation prerequisites are identified beyond the ability to send crafted requests to an affected kernel.