In the Linux kernel, a reference count leak in the nfsd_get_dir_deleg function allows memory to be unintentionally retained. This leak can cause kernel memory usage to grow over time, potentially exhausting system resources and leading to a denial‑of‑service condition for users of the NFS service. The vulnerability maps to CWE‑911, Incorrect Resource Management.

The flaw exists in the Linux kernel itself and therefore affects all installations running affected kernel versions. Specific version details are not provided, so any machine using a kernel build that includes the unpatched nfsd code is vulnerable. The only vendor listed is Linux and the product is the Linux kernel.

EPSS score is <1% and the vulnerability is not listed in CISA’s KEV. The CVSS score of 5.5 indicates a moderate severity. While the exploitation probability is unknown, the leak can cause kernel memory usage to grow, potentially leading to a denial‑of‑service. Based on the description, it is inferred that the likely attack vector involves an adversary interacting with the NFS daemon, for example by issuing repeated delegation requests, to drive the leak, especially on servers exposed to unauthenticated NFS clients. The severity of the impact warrants prompt action.