The Linux kernel contains a flaw in the block layer where the function bdev_mark_dead() incorrectly calls sync_blockdev() when a device is removed in surprise mode. This unconditional sync waits indefinitely on writeback that can never complete, causing the reset worker to hang and any tasks waiting on it to block. The issue does not corrupt memory or grant privileged access; it simply renders the system unresponsive when a surprise removal occurs, such as during an NVMe reset.

All Linux kernel builds from the core distribution that have not yet incorporated the recent patch to bdev_mark_dead() are vulnerable. The flaw is present in the generic Linux kernel regardless of vendor or distribution, so any system using an unpatched kernel version prior to the fix can be affected.

The EPSS score is below 1%, indicating a low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires an operation that triggers an NVMe reset or similar surprise device removal path, which typically is limited to local or privileged users. An attacker would need sufficient privileges to force a surprise removal of a block device, after which the kernel would hang, resulting in a denial‑of‑service condition.