A race condition exists in the Linux UFS core driver when the runtime power management level is set to UFS_PM_LVL_0. In this state, the driver mistakenly bypasses flushing pending exception handling jobs before the device enters a deep power‑down mode. When the system suspends, the driver may later attempt to access the host controller while the controller is in an invalid state, causing an illegal hardware access that crashes the system. The underlying weakness is a classic race condition between suspend handling and exception processing.

The flaw is confined to the Linux kernel’s UFS core driver and therefore affects all Linux distributions that ship the unpatched kernel. No specific kernel version range is listed, so any release prior to the commit referenced in the advisory is potentially vulnerable.

Explicitly flushing work and disabling auto BKOPs before suspend guarantees that pending exception tasks complete before the host controller is de‑energized. The race condition occurs when the runtime power‑management level is zero, allowing the driver to attempt host controller access during a deep power‑down and causing a system crash. The attack vector is not explicitly stated, but based on the description it is likely local and requires influence over the device’s runtime power‑management configuration. The EPSS score is less than 1 %. The CVSS score of 4.7 indicates moderate severity. The flaw is not listed in CISA KEV. An attacker who can alter the power‑management state of a device—such as by modifying driver settings—may induce a crash, representing a denial of service.