The vulnerability arises when the `net ping` shell command sends an ICMP echo request to the device's own IPv4 address. Since the destination is local, the network stack recursively re-enters the input processing path on the same system work-queue stack for both the echo request and the echo reply. This nested processing causes the work-queue stack to overflow, resulting in a stack overflow condition that can crash or destabilize the system. The CVSS 3.1 base score is 6.1, reflecting a medium severity with local attack vector, low complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact.

The primary impact is a denial of service caused by a stack overflow in the network stack when a device pings its own IPv4 address. This can lead to system crashes or instability, affecting availability. There is no confidentiality or significant integrity impact reported. Exploitation requires local access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid issuing ICMP ping commands to the device's own IPv4 address to prevent triggering the stack overflow. Monitor vendor communications for updates on patches or official mitigations.