A race condition arises when the power management path sets shost->eh_noresume while a SCSI error handler iterates, causing the handler to skip a runtime PM get and later release a runtime PM reference. This leaves an unmatched put, resulting in an underflow of the runtime PM usage count. If the underflow propagates to the kernel’s reference counter, it could trigger a kernel panic or other instability, effectively denying service or enabling further exploitation.

The flaw exists in the Linux kernel’s SCSI core modules across all supported versions that contain the correlated code path. No specific kernel releases are listed, so any running kernel that includes the aforementioned logic is potentially impacted.

The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, indicating no known exploitation yet. No CVSS score is provided, so the intrinsic severity cannot be quantified from the data alone. The risk remains that a malicious actor who can manipulate SCSI error conditions or power state changes may trigger the race, leading to kernel instability.