The Linux kernel calculates the number of roots per node during topology setup. On virtualized hosts, particularly Xen PVH dom0, the calculation can produce a zero value for roots_per_node when the number of nodes exceeds the number of roots. The subsequent modulo operation attempts to divide by this zero, causing a division‑by‑zero fault and resulting in a kernel panic. This crash brings the entire host to a halt, exposing the system to a denial‑of‑service condition without leaking data or compromising confidentiality.

The flaw manifests in Linux kernels running atop virtualized platforms. The documented case involves Xen PVH dom0, where the integer division yields zero; however, any hypervisor or virtualization stack that uses the same topology logic could be susceptible. All kernel branches that lack the patch that forces roots_per_node to one are vulnerable until updated.

The CVSS score of 5.5 reflects moderate severity. The EPSS score is reported to be below 1%, indicating a very low likelihood of exploitation in the current threat landscape. The vulnerability is not catalogued in CISA’s KEV list, suggesting no publicly known exploits. Based on the description, it is inferred that an attacker would need local or privileged access to the host to manipulate the topology state; the impact is a complete kernel crash, resulting in service denial without directly affecting data integrity or confidentiality.