Impact
The bug in the Linux kernel causes a per‑CPU reference counter for page control structures to remain in a killed state when a suspend timeout occurs, because the timeout path returns an error without resurrecting the reference. This leaves the page control structure permanently unusable for future operations, which can prevent later kernel components that depend on that structure from functioning correctly. The result is a loss of kernel functionality that may manifest as failed operations, kernel warnings, or potentially a panic if critical code relies on the structure.
Affected Systems
The vulnerability applies to any Linux kernel that includes the llbitmap module before the patch was applied. No specific version range is listed, so all kernel builds that contain the llbitmap_daemon implementation and the suspend timeout path are potentially affected.
Risk and Exploitability
Based on the description, it is inferred that attackers would need to trigger the suspend timeout path in the kernel, which requires privileged or system‑level access. The CVSS score of 7.1 indicates high severity. The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, so no publicly known exploits exist. Though no active exploits have been observed, repeatedly inducing the timeout could degrade kernel stability and result in a denial of service.
OpenCVE Enrichment