The vulnerability arises when a CPU is taken offline. Dev_cpu_dead() drains the kernel’s softnet queues but fails to flush skb_defer_nodes. If the list contains pending skbs, the packets remain stranded until the CPU is brought back online, and if those skbs reference page_pool fragments, page_pool_destroy() can stall indefinitely, potentially leading to a system hang. This flaw primarily allows a denial of service by exhausting kernel resources and stalling critical subsystem shutdown.

All Linux kernel builds that do not include the recent commit adding special handling of skb_defer_nodes in dev_cpu_dead() are affected. The vulnerability does not depend on distribution or kernel configuration beyond CPU hot‑plug; therefore any system running a kernel prior to the commit present in the provided Git URLs is potentially impacted. No specific version list is provided, so users should check if the referenced commit is present in their running kernel.

The EPSS score is not available and the flaw is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker with the ability to force a CPU offline—by invoking kernel hot‑plug interfaces or by generating traffic that stresses the skb_defer_nodes threshold—can trigger the stall. Because the exploit requires privileged or local access to the host to cause a CPU offline or race, the attack surface is limited to systems with enabled CPU hot‑plug and user privileges that can manipulate hot‑plug state. Nevertheless, the risk of a complete system freeze is high for production environments lacking immediate mitigation.