The vulnerability permits an unprivileged user in a distinct user and network namespace to invoke getsockopt on AF_RDS sockets and read several global lists that are not isolated per namespace. This exposes the bound address, socket inode, peer addresses, TCP sequence numbers, and RDS sequence numbers of all RDS sockets and connections on the host. The flaw is a pure data‑disclosure weakness that could allow an attacker to gather detailed network and kernel state without elevating privileges. Based on the description, the likely attack vector is a local exploit from an isolated unprivileged user namespace using getsockopt on AF_RDS sockets.

All Linux kernel versions that contain the RDS implementation and do not yet include the patch that was introduced to filter the RDS_INFO_* getsockopt handlers by the caller’s network namespace. No specific version range is listed; the issue exists in every affected kernel until the security fix is applied.

The likely attack vector is a local attack from an isolated unprivileged user namespace using getsockopt on AF_RDS sockets. A local attacker who can create an isolated user namespace and open an AF_RDS socket can exploit the defect without needing elevated privileges. Because the flaw is purely informational, the potential damage is confined to confidentiality loss. The CVSS score of 7.0 indicates a high severity, while the EPSS score of < 1% indicates a low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, suggesting that active exploitation is not currently widespread. Nonetheless, the impact warrants prompt remediation.