In the Linux kernel, the dvb-core module incorrectly reinitializes the shared waitqueue when a DVR device is opened, an instance of CWE‑665: Improper Initialization of Object or Resource. This action discards existing waitqueue entries linked to io_uring or epoll monitors, leaving them with stale pointers. When the kernel later processes these orphaned entries, it may crash or hang, effectively denying service for any process interacting with the affected DVR device.

The vulnerability exists in the Linux kernel’s dvb-core module, affecting all Linux kernel releases that contain the unpatched DVB code. Kernel versions prior to the commit that implements the fix—including the 7.0‑rc1 series—are exposed. Any system that exposes /dev/dvb/dvr devices, such as media servers or embedded set‑top boxes, may be impacted, provided the device is accessed by user or root processes.

The CVSS base score of 7.8 signifies high severity, while the EPSS score of less than 1 % indicates that exploitation is currently unlikely. The issue is not listed in CISA’s KEV catalog. The likely attack vector is local access to the DVR device, inferred from the description; an attacker would need to open /dev/dvb/dvrX. Remote exploitation would require a privileged side channel capable of interacting with the device, which is not documented.