The vulnerability in the Linux kernel's DSA subsystem was due to redundant netdev_lock_ops() and netdev_unlock_ops() calls inside the conduit ethtool wrappers. These wrappers replace the conduit device's ethtool_ops with their own to aggregate statistics from both the conduit and DSA switch ports. Taking the lock again inside these wrappers caused a deadlock, notably triggered by the 'ethtool -i' command. This deadlock effectively blocked operations involving DSA devices with locked network devices, reducing coverage and functionality. The fix involved removing these redundant locking calls to prevent deadlocks.

The vulnerability causes a deadlock condition in the kernel when interacting with DSA devices using ethtool commands, leading to denial of service (DoS) on the affected network interfaces. There is no confidentiality or integrity impact reported. The attack vector requires local access with low privileges and no user interaction. The impact is limited to availability disruption.

A fix is available in Linux kernel versions 7.0.0-28.28.1 and later. Users should upgrade to these or newer kernel versions to resolve the deadlock issue. Since this is a kernel-level fix, applying the updated kernel package from the vendor is the recommended remediation. No additional mitigation steps are indicated.