The Linux kernel bug causes the function __get_mtd_device to invoke the master's _get_device callback with a potentially partitioned MTD device. The mismatch in passing the master instead of the actual device breaks gluebipartitions, which rely on container_of logic that requires the master MTD. This flaw results in failure to properly retrieve or release MTD devices, potentially causing system instability or denial of service if the device is mismanaged. The description indicates the issue was resolved by passing the correct master to _get_device, aligning with the corresponding __put_device behavior.

All Linux systems running kernel versions affected by the bug are impacted, including distributions that ship the kernel with the identified gluebipartition flaw. Specific affected kernel releases are not enumerated in the public data, but any kernel lacking the recent patch that rectifies the _get_device call logic is vulnerable.

The CVSS score is 5.5, the EPSS score is < 1%, and the vulnerability is not listed in CISA KEV. The vulnerability appears to be a defect in device handling rather than an active exploit, implying a low likelihood of exploitation under current conditions. However, because it can lead to a denial of service environment by disrupting essential MTD operations, the risk warrants prompt remediation.