A high-severity vulnerability in the Linux kernel TIPC component could allow an attacker to cause a persistent Denial of Service via integer underflow.

The tipc_sk_conn_proto_rcv function fails to validate the peer-supplied connection acknowledgment count before subtracting it from the send counter, leading to an integer underflow. This vulnerability is exploitable by unauthenticated remote attackers.

This vulnerability enables an attacker to remotely congest and effectively disable TIPC-based network connections. With a CVSS score of 7.5, the risk to system availability is significant, potentially disrupting critical inter-process communication in cluster environments.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Review network traffic for anomalous TIPC connection patterns or unexpected resets.

Compensating Controls: If patching is delayed, implement network-level filtering to block unauthorized TIPC traffic from untrusted sources.

Public Exploit Available: Yes (per enrichment.public_pocs)

Organizations should treat this vulnerability with high urgency due to its potential for remote exploitation. Patching the Linux kernel to the provided fixed versions is the most effective way to remediate this flaw and ensure the continued stability of network operations.