A vulnerability in the Linux kernel GTP module allows unauthenticated remote attackers to trigger a system crash, resulting in denial of service.

The vulnerability exists within the gtp1u_send_echo_resp function, which fails to validate the return value of skb_pull_data. An unauthenticated attacker can send a specially crafted 16 to 19 byte GTP echo request, causing the kernel to trigger an skb_under_panic condition and leading to a fatal kernel exception.

The primary impact of this vulnerability is a complete system denial of service. Because the flaw is reachable by unauthenticated remote attackers and triggers a kernel panic, it poses a significant risk to the availability of affected network infrastructure. With a CVSS score of 7.5, this high-severity issue necessitates prompt attention to prevent operational disruption.

Immediate Action: Update the Linux kernel to version 6.1.183, 6.6.148, 6.12.101, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events, specifically those referencing skb_under_panic or gtp_encap_recv failures.

Compensating Controls: If patching is not immediately feasible, restrict network access to the GTP service to only trusted sources using firewall rules to prevent unauthorized packet transmission.

Public Exploit Available: Unknown

Given the potential for remote denial of service, administrators should prioritize updating kernel packages to the versions specified. Ensuring that the underlying system remains stable under malicious traffic is critical, and applying the vendor-provided patches is the only definitive way to resolve this memory safety issue.