An unauthenticated attacker can disrupt network services by injecting malformed TCP packets to terminate connections, presenting a high risk to service availability.

The Linux kernel TCP stack improperly handles RST packets in the SYN-RECEIVED state, allowing an off-path attacker to terminate half-open connections without requiring an exact sequence number match. This allows an unauthenticated remote attacker to disrupt connection establishment.

This vulnerability enables a remote denial of service attack against any service relying on TCP connections, which could result in significant service outages. With a CVSS score of 8.2, the high accessibility of this flaw makes it a critical concern for public-facing servers.

Immediate Action: Update the Linux kernel to versions 6.18.42, 7.1.6, or later, to correctly enforce TCP sequence number validation.

Proactive Monitoring: Review firewall and IDS logs for patterns of high volumes of TCP RST packets, which may indicate an ongoing denial of service attack.

Compensating Controls: Use stateful firewalls or load balancers that can perform deep packet inspection and filter out malformed TCP packets before they reach the kernel.

Public Exploit Available: false

Given the ease of exploitability and the potential for widespread service disruption, immediate patching is strongly recommended for all systems exposed to the internet. Administrators should prioritize this update to ensure the stability and availability of TCP-based network services.