The vulnerability occurs when a KVM virtual machine deassigns a IRQFD; the kernel mistakenly overwrites the IRQFD’s copy of the IRQ routing entry. This clobbering causes architecture‑specific routines such as kvm_arch_irq_bypass_del_producer and kvm_irq_routing_update to work with stale or invalid data, leading to NULL pointer dereferences or list corruption that ultimately trigger a kernel panic. The host dump provided in the description shows classic crashes in AMD ACPI code and AVIC updates, confirming that the flaw can bring the entire virtualization host offline.

Affected systems include any Linux kernel that contains the unpatched IRQFD handling code, specifically the release‑candidate builds 6.19:rc1 through 6.19:rc8. Any derivative kernel derived from those versions that has not applied the patch is also vulnerable until updated.

The CVSS score of 7.8 indicates a high‑severity issue, while the EPSS score of less than 1% reflects a very low current exploitation probability. The flaw is not listed in the CISA KEV catalog, suggesting limited active exploitation. Based on the description, triggering the deassignment of a KVM_IRQFD requires privileged or local host access, so the likely attack vector is inferred to be local privileged. A successful exploit would cause a kernel panic, providing denial‑of‑service to all virtual machines on the host.