A high-severity vulnerability in the Linux kernel allows unauthenticated remote attackers to trigger a denial of service condition through improper packet length validation.

The Linux kernel fails to perform necessary pre-decrypt and pre-verify length checks within the krb5 crypto library and the AF_RXRPC protocol implementation. An unauthenticated attacker can exploit this by sending specially crafted DATA packets secured with RxGK, leading to a system crash or service disruption.

Successful exploitation of this vulnerability results in a denial of service, which can render critical infrastructure or enterprise applications running on affected Linux systems unavailable. Given the CVSS score of 7.5, this flaw poses a significant operational risk, as the attack vector is network-based and requires no authentication or user interaction, enabling automated exploitation across exposed network services.

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for unexpected kernel panics or service restarts related to network traffic processing. Review network traffic patterns for abnormal spikes in malformed RXRPC packets.

Compensating Controls: Implement network-level filtering to restrict access to services utilizing AF_RXRPC to trusted internal segments, thereby limiting the exposure of vulnerable endpoints to potential remote attackers.

Public Exploit Available: No

The severity of this vulnerability, combined with the lack of required authentication, necessitates prompt action. Administrators should prioritize patching the Linux kernel to the identified secure versions to eliminate the risk of remote service disruption. If immediate patching is not feasible, restrict network access to affected services to minimize the attack surface.