The vulnerability involves the drbd_adm_dump_devices() function in the Linux kernel's drbd module, where an imbalance of RCU (Read-Copy-Update) calls was detected. The function failed to call rcu_read_lock() before rcu_read_unlock(), which could lead to synchronization problems. The issue was identified by static analysis using the Clang thread-safety analyzer and has been resolved by adding the missing rcu_read_lock() call to balance the RCU usage.

The vulnerability does not affect confidentiality or integrity but impacts availability, as indicated by the CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Improper RCU synchronization could cause kernel instability or crashes, potentially leading to denial of service conditions on affected systems.

A fix for this vulnerability has been implemented in the Linux kernel by correcting the RCU call balance in drbd_adm_dump_devices(). Users should apply the official kernel updates that include this fix. Since no specific patch links or vendor advisories are provided, users should monitor official Linux kernel release notes and update accordingly. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.