The vulnerability is a race condition in the Linux kernel damon subsystem. When damon_call() and damos_walk() run concurrently with kdamond termination, a mismatch between the damon_ctx->kdamond flag and its unset operation can cause damon_call() to wait forever or ignore cancellation of pending requests. This leads to deadlock or memory leakage, potentially exhausting system resources and causing instability.

The affected product is the Linux kernel. Any kernel version prior to the patch that implements the fix is vulnerable. There is no specific version range provided, so all current LTS and mainstream kernels are at risk until the patch is applied.

The likely attack vector is inferred to require privileged code that can invoke damon_call() while kdamond is terminating, as the race occurs only inside the kernel and is not exposed to user processes directly. The potential impact is a deadlock or memory leakage that can exhaust system resources and lead to a denial of service. The CVSS and EPSS scores are not available, and the vulnerability is not listed in KEV. The condition would need to be triggered during a shutdown or maintenance operation that allows damon_call() to execute concurrently with kdamond termination. If an attacker can cause this situation, they could hang the kernel, effectively creating a denial of service scenario.