The vulnerability arises from a NULL pointer dereference in the CIFS filesystem module of the Linux kernel. When a CIFS mount is unmounted, the kernel attempts to remove CIFS file descriptors without properly validating pointers, causing a BUG and a fatal crash. An attacker who can perform CIFS mounts and unmounts on the target system can trigger this condition, resulting in a system reboot or reboot loop, thereby disrupting availability and potentially allowing local privilege escalation via reboot chain.

The affected product is the Linux kernel, all versions that contain the buggy CIFS implementation. No specific kernel release is enumerated in the data, so any kernel that has not applied the later commit fixing this problem remains vulnerable.

The CVSS score of 8.4 indicates a high‑severity vulnerability, but the EPSS score is <1%, suggesting a low probability of exploitation in practice. The error is a null-pointer dereference, a high-severity flaw (CWE‑476). Although the issue is not listed in CISA KEV, it is a kernel-level bug that requires local access or the ability to mount CIFS shares. The attack vector is inferred to be local or host‑based, as it requires the ability to perform mount/unmount operations, which are typically privileged. The impact is complete denial of service via a crash, with no known remote exploitation path.