This vulnerability in IBM i 7.3 to 7.6 arises from uncontrolled recursion within the ILE compiler. An attacker with authentication privileges can cause a denial-of-service by compiling source code that contains a specific combination of statements triggering this recursion. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, requiring privileges, and resulting in availability impact only. No integrity or confidentiality impacts are noted. No vendor advisory or patch information is currently available.

The primary impact is denial-of-service on affected IBM i systems, potentially disrupting availability of the ILE compiler or related services. There is no impact on confidentiality or integrity. Exploitation requires authenticated access, limiting the attack surface to users with some level of privilege on the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the ILE compiler to trusted users only and monitor for unusual compilation activity. No official remediation or temporary workaround is currently documented.