This vulnerability arises because the batch lookup and delete operation in the BPF hash table implementation includes no rescheduling points. When a lookup batch traverses a very large map, the function can run for more than a minute, keeping a CPU busy and triggering the kernel soft‑lockup watchdog. The result is that the affected CPU becomes unresponsive for an extended period, potentially degrading the entire system’s responsiveness. The flaw is discovered in the kernel’s __htab_map_lookup_and_delete_batch path, not in the generic path that was previously patched.

The affected systems are any Linux kernel builds that include the unpatched htab‑based hash map code. All distributions shipping a kernel prior to the patch that added periodic rescheduling in this function are vulnerable. No specific vendor version list is provided, so any kernel that has not yet incorporated the corresponding commit is at risk.

No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, so the probability of exploitation is not quantifiable from public data. However, a user with the ability to load or interact with BPF programs—typically a privileged user or an attacker that has already compromised the kernel—could intentionally exercise the large batch lookup to force a soft lockup, resulting in a denial of service. The impact is thus high in environments where BPF maps can be manipulated. Prior to patching, the best estimate of risk is that the vulnerability is exploitable for DoS but requires kernel interaction privileges.