The Linux kernel’s liveupdate subsystem has a flaw in how it handles retrieval failures of LUO files. When a retrieve operation fails, the kernel does not record the error state, so the operation may be retried. Each retry can attempt to use or free data structures that have already been released or are inconsistent, which can lead to a kernel panic. This results in a denial‑of‑service effect. The bug is a consequence of improper error handling and is represented by CWE‑390.

All Linux kernel builds that ship with the liveupdate framework are affected, regardless of distribution. The exact affected versions are not precisely enumerated, but any kernel prior to the patch that changes the retrieve status handling is vulnerable.

Based on the description, the likely attack vector is a local user‑space ioctl that triggers the liveupdate retrieve operation. The CVSS score is 5.5, indicating moderate severity, while the EPSS score is less than 1%, showing a very low but non‑zero exploitation probability. The flaw is confined to the kernel; once a kernel panic occurs, the attacker cannot continue executing code in the affected context. No remote code execution path is disclosed, but the potential to crash the system makes the risk for affected installations significant, especially in environments that rely on liveupdate for critical patches.