The vulnerable logic zeroed the entire cp_flags word in rds_conn_path_reset() using a plain write, while other parts of the kernel accessed individual bits with atomic operations. This unsynchronized write created a race condition where concurrent accesses could silently overwrite each other. The result was inconsistent or lost RDS connection state information, potentially leading to premature or incomplete shutdown of RDS connections and unpredictable service behavior.

The flaw existed in the Linux kernel’s implementation of the Reliable Datagram Sockets (RDS) protocol. Any kernel that included the unsynchronized reset logic before the patch was introduced was affected. The fix is present in recent upstream releases and the corresponding Oracle UEK update that preserves essential connection state flags.

There is no CVSS or EPSS score reported for this entry, and the vulnerability is not listed in the CISA KEV catalog. The weakness is a data race; exploitation would require precise timing between concurrent RDS operations, making practical exploitation unlikely in typical workloads. However, the impact of silent state loss can manifest as intermittent RDS service disruptions, especially in high‑traffic deployments.