A redundant call to netdev_lock_ops() inside the Data Switch Architecture (DSA) conduit ethtool wrapper causes a deadlock when an ethtool command targets the conduit device. The lock is acquired twice, which stalls the kernel network stack for that device, effectively taking the network interface offline. The flaw does not expose confidential data or alter system integrity, but it interrupts network availability until the kernel is rebooted or the device context is reset.

Linux kernels that have the Data Switch Architecture enabled, particularly configurations that build CONFIG_NET_DSA_LOOP or similar testing devices which auto‑populate the ports of eth0, are affected. Any distribution shipping such kernel code could be impacted if the redundant lock calls are present.

The EPSS score is less than 1%, showing a very low but non‑zero likelihood of exploitation in the wild. With a CVSS score of 5.5, the vulnerability is of moderate severity. Attacks would be local, requiring the ability to run ethtool against the affected device; a local user or compromised process could trigger the deadlock, causing a temporary loss of network services. The vulnerability is not listed in CISA’s KEV catalog, so no known active exploits are reported.