The vulnerability occurs when the PCI reset function acquires a device lock and a reclamation thread attempts to remove the device while the lock is held, causing a blocking deadlock. The deadlock prevents the system from completing the reset and removal operations, potentially leading to a kernel freeze or denial of service. The flaw is an internal race condition that requires privileged kernel context and is not exploitable from user space. The fix uses non‑blocking lock attempts and removes unnecessary reference counting to prevent the deadlock.

The issue affects the Linux kernel code base; specific kernel version numbers are not listed, but the CPE indicates a broad impact across all Linux kernel releases that include the pds_core driver. The vendor is Linux Linux. Distributions should verify that their kernel source contains the patch corresponding to the referenced commits.

Given the absence of EPSS data and no listing in CISA KEV, the documented exploitation probability is unknown, but the nature of the flaw suggests a localized denial of service attack that would require privileged access to trigger. The CVSS score is not provided, so the overall risk is considered moderate, primarily as a system stability issue rather than a direct security breach.