The Linux kernel maintains a CPER ring buffer used for advanced error reporting. When the ring overflow handling processes corrupt CPER data, it logically derives an entry size that fails to advance the read pointer after conversion and masking operations. The recovery loop then repeatedly tests the same location while holding the ring mutex, causing the worker thread that is writing the next CPER record to spin indefinitely. This manifests as a kernel hang or service disruption. The flaw is a typical infinite loop caused by trusting corrupted input and not validating pointer advancement.

Vendors: Linux; Product: Linux kernel. No specific version range is enumerated in the advisory, so any kernel that implements the CPER ring as described may be affected until an update supersedes the unpatched logic.

The CVSS score is not supplied, and EPSS is not available, but the impact of a stuck kernel worker is severe—potentially halting critical system functions or causing a denial of service. The vulnerability requires injection of corrupt CPER data, which could be achieved by a privileged process or a device driver that feeds malformed CPER entries. No formal KEV listing indicates no recorded exploitation yet, but the risk remains high due to the kernel-level nature of the bug.