The bug in the Linux kernel occurs when disabling XSK pools on the GVE driver. The driver calls the unlocked versions of napi_disable and napi_enable after acquiring the netdev lock, causing a thread to attempt to reacquire a lock it already holds. This lock contention leads to a deadlock, halting the offending kernel thread and potentially causing a kernel hang or severe degradation of network services. The weakness is a classic deadlock caused by improper lock ordering, identified as CWE-367 and CWE-764.

The vulnerability affects the Linux kernel, specifically the GVE networking driver that manages XSK pools. No specific kernel versions are listed in the CVE data; however, the issue was reported in a production environment, implying that contemporary kernel builds that include the GVE driver are impacted.

The CVSS score is 4.4, with an EPSS score of less than 1%, and it is not listed in CISA's KEV catalog. The likely attack vector requires privileged access to the kernel – for example, an attacker with root permissions who can trigger the disabling of XSK pools. While there are no publicly known exploits, a local privilege attacker could exploit the deadlock to deny service to networking components or possibly the entire system. The lack of exploitation data and the nature of the bug suggest a low to moderate severity depending on the environment.