The Linux kernel bug involves the SATA driver libata-core and the ST1000DM010-2EP102 SATA drive model. The driver fails to correctly disable low‑power mode (LPM) for these drives, causing erratic power‑state changes that trigger random system freezes. The result is a denial of service, as the host becomes unresponsive until rebooted, and no further user or kernel activity can be performed.

All Linux distributions that ship the affected kernel code are impacted. The issue is specific to the ST1000DM010-2EP102 model and similar BarraCuda family drives such as the ST2000DM008-2FR102. No specific kernel version range is given, so any kernel that contains the unpatched libata-core code remains vulnerable. System administrators should verify whether their kernel includes the fix that disables LPM for these models.

The CVSS score of 5.5 indicates a moderate severity risk, while the EPSS score of < 1% suggests a low probability of exploitation in the wild. The likely attack vector is local, requiring an affected SATA drive with LPM enabled and an opportunity to trigger the freeze through the device’s power‑management logic. The vulnerability is not listed in CISA’s KEV catalog.