The issue arises when the Linux kernel’s CXL CPER work registration helpers acquire a normal spinlock with guard(), leaving local interrupts enabled. The GHES error notification path, which runs in hard IRQ context, acquires the same locks using an irqsave guard(), temporarily disabling interrupts. If a CPU holds the lock in normal context and a GHES interrupt fires on the same CPU, the interrupt handler spins waiting for the lock while the lock holder is preempted, resulting in a deadlock that can halt the CPU and disrupt kernel operations. This concurrency flaw corresponds to CWE‑674 (Unchecked Lock Usage) and CWE‑833 (Deadlock in Interrupt Context).

Any Linux kernel installation that builds the ACPI/APEI/ghes module with CXL CPER support and has not yet integrated the fix that converts the locks to raw_spinlock_t is vulnerable. No specific version range is supplied; the risk applies to unpatched builds prior to the changes described in the CVE.

The CVSS score of 4.4 and an EPSS score of < 1% indicate a low likelihood of exploitation. The flaw requires a GHES interrupt, typically triggered by a hardware fault, so it is not trivially controllable from a remote client. Accordingly, the risk is primarily local: a malicious firmware or a local attacker could provoke the deadlock, leading to a system stall. The vulnerability is not listed in CISA’s KEV catalog, consistent with its limited exploitation surface.