The bug in the Linux kernel causes a per‑CPU reference counter for page control structures to remain in a killed state when a suspend timeout occurs. Because the timeout path returns an error without resurrecting the reference, the page control structure becomes permanently unusable for subsequent operations, which can lead to failures in kernel components that rely on that structure.

The vulnerability applies to any Linux kernel build that includes the llbitmap module before the patch was applied. All kernel versions containing the llbitmap_daemon implementation and the suspend timeout path are potentially affected, as no specific version range is listed.

The likely attack vector is to trigger a suspend timeout on a system running an affected kernel, which requires privileged or system-level access. The CVSS score of 7.1 indicates high severity, and the EPSS score of <1% indicates a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, meaning no public exploits have been documented. This flaw could lead to a denial of service by permanently preventing the per‑CPU reference counter from being revived, rendering dependent kernel components inoperative.