The vulnerability stems from recursive acquisition of the pci_lock_rescan_remove lock during EEH event handling in the PowerPC Linux kernel. When the lock is held by eeh_handle_normal_event and eeh_pe_bus_get() attempts to acquire the same lock again, the kernel triggers a recursive locking scenario that can result in deadlock or improper PCI error reporting. The outcome is a potential loss of bus rescan functionality, mis‑reported EEH events, and an availability degradation that could lead to system instability or a kernel panic. This is a classic concurrency flaw, primarily impacting system reliability rather than confidentiality or integrity.

The issue affects Linux kernel builds for PowerPC architectures. The exact version range is not specified in the data; the fix was integrated in commit 1010b4c012b0 around kernel version 6.18. Systems running earlier kernel releases that include the EEH driver without this patch are susceptible.

Based on the description, it is inferred that the flaw can be triggered by events that force EEH event handling, such as a PCI hotplug operation or hardware error that leads to eeh_handle_normal_event. An attacker with kernel-level access, or control over such hardware events, could cause the recursive lock acquisition, potentially leading to a deadlock and a loss of bus rescan functionality. The CVSS score of 5.5 reflects a moderate impact, and the EPSS score of <1% indicates a low probability of exploitation in the wild; the vulnerability is not listed in the CISA KEV catalog. Hence, the risk is appreciable only for systems running affected kernel versions in environments where PCI hotplug or EEH events can be triggered by untrusted code.