The Linux kernel bug in pds_core causes the wait function pdsc_devcmd_wait() to return a stale success status instead of proper error codes in two scenarios: when firmware stops unexpectedly and when a command times out. This incorrect success status prevents the error handling in pdsc_devcmd_locked() from being executed, meaning that kernel health recovery work is not queued. The result can be a firmware crash that is not detected or a loss of recovery for timed‑out commands, reducing system reliability and potentially allowing repeated failures to accumulate. The vulnerability does not provide a direct code execution path, but it can lead to service disruption and loss of system stability.

All Linux kernel builds are affected due to the nature of the patch applied to pds_core. Specific kernel versions that contain the pre‑patch code are not listed in the data, so any system running a kernel version prior to the commit that introduced the fix may be vulnerable. No vendor or product specificity is provided beyond the general Linux kernel.

The CVSS score is 7.5, indicating a moderate to high impact. The EPSS score is reported as < 1%, suggesting a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, requiring access to the hardware or the ability to trigger firmware faults; external exploitation is not directly supported by the description. Due to the low likelihood of exploitation and the absence of a known public exploit, the overall risk is moderate, but the potential for loss of service remains a concern.