The vulnerability is a deadlock condition that occurs in the iSCSI target subsystem of the Linux kernel when an aborted WRITE command in the WRITE_PENDING state is not properly completed. This causes the target worker thread to hang indefinitely, effectively preventing any further iSCSI operations on the affected target and potentially exhausting system resources. The weakness is a deadlock flaw (CWE‑399).

The issue is present in the Linux kernel, affecting any system that runs a kernel version without the fixed commit. No specific product version is listed, so any kernel revision prior to the introduction of the patch is vulnerable. Systems exposing an iSCSI target interface are at risk.

There is no CVSS score available and the exploit probability is not listed in EPSS. The vulnerability is not included in the CISA KEV catalog. The likely attack vector is a remote initiator that sends a LUN_RESET and subsequent dataout PDUs to a target running the vulnerable kernel, thereby causing a deadlock and a denial of service. Because the condition requires specific iSCSI traffic, the attack surface is limited to hosts exposed to iSCSI over the network, but the impact on availability can be significant if the target service is critical.