In the Linux kernel, the function epf_ntb_epc_destroy performs a cleanup of PCI endpoint resources that the caller is expected to handle later. Because that resource teardown is duplicated, a kernel oops is triggered whenever the PCI link allow process fails or when a PCI link is dropped. The resulting oops indicates a kernel panic that can crash the operating system, thereby causing a denial of service. The weakness is an improper resource management flaw that can lead to a double release or uninitialized resource use, but does not directly expose sensitive data.

The vulnerability exists in all Linux kernel builds that include the PCI endpoint subsystem and contain the epf_ntb_epc_destroy code path before the safety fix was merged. Anyone running a kernel version that has not incorporated the commit that removes the duplicate teardown is affected. The exact affected releases are not enumerated in the advisory, so any kernel that predates the fix is at risk.

The EPSS score indicates a very low exploitation probability (<1%), and the vulnerability is not listed in the CISA KEV catalog, meaning it has not been observed in the wild. The CVSS score of 5.5 reflects moderate severity, confirming the risk is non-zero but not critical. Because the flaw requires interaction with PCI endpoint devices and privileged kernel code, an attacker must have appropriate access to trigger the faulty path. Nonetheless, a local or privileged attacker can provoke the double teardown and cause a system crash, resulting in a denial of service.