Impact
The vulnerability causes the RDS connection shutdown routine to miss acquiring critical fastpath locks before performing transport teardown. This race allows concurrent readers and writers to access or modify shared state, resulting in hardware‑specific memory corruption, unexpected zeroing of rings, or null dereferences that lead to a kernel panic. The effect is a denial of service at the kernel level, potentially halting system operation when affected RDS traffic is processed. The flaw does not expose confidential data directly but undermines system availability and stability.
Affected Systems
The affected software is the Linux kernel, specifically the RDS networking subsystem. No specific version range is enumerated in the advisory; the fix was introduced in a kernel commit and applies only to kernels that incorporate that change.
Risk and Exploitability
The CVSS score is not supplied, and the EKV status indicates it is not a known exploited vulnerability; the EPSS score is unavailable, so it is difficult to gauge the current exploitation probability. Based on the description, it is inferred that the flaw resides in a low‑level, lockless path and that an attacker would need to trigger concurrent RDS operations. This likely requires local or privileged access to the affected host, although the exact privilege level is not explicitly stated in the advisory. The attack surface is limited to systems running RDS, and a successful exploitation could lead to a system crash, which is severe.
OpenCVE Enrichment