The Linux kernel contains an infinite loop in the rcu_read_unlock() routine that is triggered when a softirq is raised while ftrace is enabled. The removal of recursion‑protection code in __rcu_read_unlock() makes it possible for the loop to be entered during normal kernel operation. When the loop executes, the CPU cycles are consumed indefinitely, leading to a kernel freeze that renders the system unresponsive.

All Linux kernel builds that include the buggy __rcu_read_unlock() logic before the incorporation of commits 5f5fa7ea89dc and b41642c87716. This includes every distribution and custom kernel that has not applied these patches, because the flaw resides in core kernel code and is not limited to any optional module or configuration.

No official CVSS or EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. Exploitation requires local kernel privilege or the ability to trigger a softirq with ftrace enabled. As a result, the risk is moderate: systems that cannot run code with kernel privileges are unlikely to be affected, while those that can execute kernel‑level code may force a denial of service by inducing the deadloop.