A logic error in the libahci driver clears the PxCLBU and PxFBU registers to zero when the AHCI_HFLAG_32BIT_ONLY flag is enabled. For 64‑bit capable HBAs these registers normally retain an implementation‑specific reset value. Overwriting them during driver probing prevents the AHCI controller from initializing properly, causing the system to fail during boot and leading to a denial of service. The weakness is a defensive coding flaw that corrupts critical register values.

Linux kernel releases that contain the unpatched libahci driver are in scope, especially those that support JMicron JMB585 devices. The vulnerability arises from a recent commit that forces 32‑bit DMA on these controllers, and any kernel version prior to the patch that incorporates this logic may be affected. Kernel sources from the upstream Linux project, as referenced in the advisory, include the faulty code.

The CVSS v3.1 score of 7.0 indicates high severity. The EPSS score of < 1% shows a very low but non‑zero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The flaw can only be triggered during system initialization; therefore, exploitation is limited to privileged local access to the machine and does not provide remote code execution or privilege escalation. The likely attack vector is a local attacker with the ability to boot or reconfigure the system, as the failure occurs when the driver is probed.