The vulnerability is an error handling flaw in the Linux kernel’s vhost‑vdpa driver. The driver swaps an error pointer returned by eventfd_ctx_fdget() into a configuration context without first validating it. If the function fails, the context briefly holds an ERR_PTR value, and subsequent callbacks may pass this invalid pointer to eventfd_signal(). This improper validation can cause the kernel to operate on an invalid context, potentially leading to crashes or the silent loss of device configuration interrupts. The weakness is a misuse of returned error pointers and falls under CWE‑366.

All Linux kernel installations that load the vhost‑vdpa driver are potentially affected, regardless of distribution, until the fix for this bug is applied. The exact kernel revisions that contain the patch (commit 0bde59c1723a) are not specified in the data, so any kernel prior to that commit should be considered vulnerable.

The CVSS score of 5.5 and the EPSS score is < 1%; the vulnerability is not listed in the CISA KEV catalog. The flaw requires interaction with the vhost‑vdpa subsystem, which is typically accessed by privileged or kernel‑mode code. An attacker that can induce the error condition or exploit the resulting misbehavior may cause a denial of service of the virtual device that relies on configuration interrupts. Although not exploitable remotely in a standard user context, it poses a risk in virtualization environments where the privileged user or attacker has control over the virtual machine hosting the driver.