In the Linux kernel a missing range check in the function do_proc_int_conv_ms_jiffies_minmax allows an out‑of‑range value to be converted from milliseconds to ticks when the sysctl interface proc_dointvec_ms_jiffies_minmax is used. The resulting value can cause a kernel fault or, at a minimum, incorrect timing behavior, leading to kernel instability or a crash. This flaw is a bounds check failure (CWE-1284).

All Linux kernel releases that expose the proc_dointvec_ms_jiffies_minmax sysctl interface without applying commit d174174c6776 or later are affected. The vulnerability applies to the core kernel and is present in any distribution based on those kernel versions.

The CVSS score of 5.5 indicates moderate severity, while an EPSS score of less than 1% shows a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require writing an out‑of‑range value to the relevant /proc/sys entry, which is usually writable only by root, thereby reducing the attack surface. Although breach is unlikely, the potential for a kernel panic justifies timely remediation.