The vulnerability is a race condition in the Linux kernel’s BTT (Block Translation Table) subsystem that occurs when a task is preempted while acquiring a lane. The legacy spinlock and per‑CPU recursion counter are no longer valid after BTT lanes became preemptible, allowing a second task to observe a non‑zero recursion count, bypass the lock, and access the same lane concurrently. This can result in silent data corruption during BTT writes, potentially compromising the integrity of data stored in non‑volatile memory devices.

All users of the Linux kernel that support the BTT subsystem are affected. No specific kernel version range is supplied, but the issue applies to any kernel where BTT lanes are preemptible and the lane model uses the legacy spinlock mutex. It is implied that devices using the nvdimm interface are at risk.

The CVSS score of 7.3 and an EPSS score of < 1% indicate a moderate severity but a low exploitation probability. The vulnerability is not listed in CISA KEV. Based on the description, it is inferred that the attack requires local privileged execution to load a vulnerable kernel. Because the flaw manifests only when a preemption occurs during lane acquisition, the exploitation window is narrow and likely unlikely to be abused in the wild. Nevertheless, the consequence is significant data corruption, so the risk is considered low to moderate, contingent on an attacker’s ability to trigger the race during normal kernel operation. The vulnerability is not publicly exploited yet and has no known external exploits.