FRRouting versions 10.1 and later have a vulnerability in the BGP daemon (bgpd) where it does not properly close a BGP session when the Send Hold Timer expires. This can cause the session to remain stuck in the Established state or cause bgpd to crash if Graceful Restart is enabled, impacting all BGP sessions on the router. The issue can be triggered by a neighbor that stops reading data but continues sending KEEPALIVEs, which may be due to overload or malfunction rather than malicious intent.