The defect in the Linux kernel prevents the XFS filesystem from releasing buffer locks correctly during a synchronous transaction commit. When a shutdown occurs while the CIL push workqueue is flushing, the buffer locks are held during the commit, leading to a deadlock when the worker thread attempts to pin the same buffers. This can freeze the system, interrupt I/O operations, and prevent proper shutdown or data integrity checks, effectively causing a denial of service.

Afflicted systems are Linux kernel installations that use the XFS filesystem. Any kernel version that has not yet incorporated the patch removing the xfs_trans_bhold() calls is vulnerable. The vulnerability applies to all distributions running the affected kernel regardless of distribution vendor.

The CVSS score is not specified, and the EPSS score is unavailable, so an explicit severity rating is absent. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires kernel-level execution, meaning it is only achievable by users with root privileges or by triggering the condition via system shutdown or crash routines. The likelihood of accidental exploitation is low, but a routine reboot during XFS sync could trigger the deadlock, leading to a temporary denial of service. Overall, the risk is considered moderate due to the potential impact on availability and the need for privileged intervention.