The patch fixes a flaw in a Linux kernel network scheduler where the SFQ (Sprout Fair Queue) qdisc accepts a quantum value that can be reduced to 1. This value causes a deficit‑refill loop that cycles roughly 2^31 times while holding the qdisc lock, leading to a soft lockup and disabling the system’s ability to process network traffic. The weakness is an improper input validation that results in resource exhaustion. An attacker with CAP_NET_ADMIN privileges, which can be obtained within a namespace by a process with unshare -Urn, can trigger the failure by creating or changing an SFQ qdisc with quantum 1 and other crafted parameters.

Linux kernel distributions that include the CONFIG_NET_SCH_SFQ configuration, typically any distribution shipping a recent mainline kernel that allows the SFQ qdisc. The vulnerability affects any system where the configuration module is enabled and a user with network administration privileges can issue tc qdisc commands for a dummy or real network device.

The CVSS score of 5.5 indicates moderate severity while the EPSS score of < 1% suggests a very low exploitation probability. The vulnerability is not listed in the KEV catalog, indicating no known public exploitation yet. Nonetheless, because the flaw requires only CAP_NET_ADMIN, which can be granted to a container or a setuid helper, the risk of internal exploitation remains high for environments where users can modify qdisc settings. The attack vector is inferred to be local, leveraging standard Linux network tools to create a qdisc with a dangerous quantum value.