The vulnerability stems from recursive acquisition of the pci_lock_rescan_remove lock during EEH event handling in the PowerPC Linux kernel. When the lock is held by eeh_handle_normal_event and eeh_pe_bus_get() attempts to acquire the same lock again, the kernel triggers a recursive locking scenario that can result in deadlock or improper PCI error reporting. The outcome is a potential loss of bus rescan functionality, mis‑reported EEH events, and an availability degradation that could lead to system instability or a kernel panic. This is a classic concurrency flaw, primarily impacting system reliability rather than confidentiality or integrity.

The issue affects Linux kernel builds for PowerPC architectures. The exact version range is not specified in the data; the fix was integrated in commit 1010b4c012b0 around kernel version 6.18. Systems running earlier kernel releases that include the EEH driver without this patch are susceptible.

The CVSS score is not present, and the EPSS metric is unavailable, indicating that the exploitation probability is uncertain. The vulnerability has not been listed in the CISA KEV catalog, suggesting no known widespread exploitation yet. Nevertheless, because the flaw comes from a recursive lock that can cause a deadlock, a local attacker or one who can control PCI hotplug events could trigger instability. Attack conditions require a kernel mode context and the ability to provoke an EEH event, so remote exploitation is unlikely but local privilege escalation or a trusted user could leverage the bug to destabilize the system.