The bug in the Linux kernel causes a per‑CPU reference counter for page control structures to remain in a killed state when a suspend timeout occurs, because the timeout path returns an error without resurrecting the reference. This leaves the page control structure permanently unusable for future operations, which can prevent later kernel components that depend on that structure from functioning correctly. The result is a loss of kernel functionality that may manifest as failed operations, kernel warnings, or potentially a panic if critical code relies on the structure.

The vulnerability applies to any Linux kernel that includes the llbitmap module before the patch was applied. No specific version range is listed, so all kernel builds that contain the llbitmap_daemon implementation and the suspend timeout path are potentially affected.

The CVSS score of 5.5 indicates a medium severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, so there are no published exploits. The attack vector would require interaction with the kernel’s suspend handling path, typically available only to privileged users or system processes. While no active exploits have been reported, repeated triggering of the suspend timeout could degrade kernel stability, so the risk is considered moderate but could lead to denial of service if the bug is exploited or repeatedly triggered.