pmem_submit_bio records a preflush error but still copies bio data, later overwriting the error with a successful flush. This means that data may be written after a failed barrier, causing the bio to succeed while the ordering guarantee is missing. The effect is that persistent memory writes may not be correctly ordered, potentially leading to data loss or corruption.

Affected systems are Linux kernels that implement the nvdimm/pmem subsystem. The CNA data lists only the general Linux kernel product, so any distribution running an unpatched kernel version is subject to this issue.

The CVSS score is not provided, and the EPSS score is missing, so the exploitation probability cannot be quantified from the available data. The vulnerability is not listed in the CISA KEV catalog, indicating no confirmed exploitation yet. Likely, a privileged user or a compromised kernel process would need to trigger a preflush that fails; this could be done via pmem operations. Until a patched kernel is available, systems should monitor for anomalous pmem behaviors and consider limiting access to pmem devices.