The vulnerability in the Linux kernel's mrp_pdu_parse_vecattr function arises from incorrect handling of vector attribute events encoded three per byte. The parser fails to decrement the event count after processing the third event, causing it to consume the next byte incorrectly and apply a spurious event. Additionally, when the event count is zero, the parser wrongly consumes bytes as FirstValue, corrupting subsequent parsing. When the event count exceeds three, the attribute value is not incremented correctly across byte boundaries, causing incorrect event attribute values. The fix involves decrementing the event count after the third event, skipping FirstValue consumption when the event count is zero, and incrementing the attribute value at each loop iteration.

This vulnerability leads to corrupted parsing of MRP protocol data units, which can cause denial of service by disrupting the MRP applicant state machine. There is no confidentiality or integrity impact reported. The attack vector is local with low privileges required and no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, avoid processing untrusted MRP protocol data or apply kernel updates once the vendor releases a fix.