Impact
A concurrency defect in the Linux kernel’s iomap subsystem can cause a deadlock when the iomap_split_ioend function processes more bios than the dedicated bio_set can hold. The suspension of I/O handling leads the kernel to become non‑responsive, effectively denying service to all running processes. The flaw is a classic deadlock scenario that can reduce system availability.
Affected Systems
The issue applies to all Linux kernel implementations that have not incorporated the patch referenced in the provided Git commit links. No specific version range is listed, so any kernel using the affected iomap code is potentially vulnerable.
Risk and Exploitability
The CVSS score is 7.5, indicating a high severity, and the EPSS score is less than 1%, suggesting a very low probability of exploitation in the wild. Based on the description, it is inferred that an attacker could trigger the deadlock by inducing a high volume of I/O operations that exhaust the bio_set. The vulnerability is not listed in the CISA KEV catalog, but the lack of exploitation data does not preclude the possibility of a denial‑of‑service attack once the kernel is vulnerable.
OpenCVE Enrichment