The flaw lies in the netfs_perform_write implementation of the Linux kernel. Under certain write scenarios, the function fails to correctly update the folio->private reference, allowing the same private data to be attached multiple times and leaking folio references as well as netfs_folio or netfs_group objects. This leakage can deplete system resources, potentially causing instability or denial of service. The vulnerability is an improper resource management weakness leading to memory or reference counter exhaustion, which may also expose internal kernel structures if the leaked objects contain sensitive information.

Affects the Linux kernel in all versions that include the buggy netfs_perform_write implementation before the fix. The vulnerability applies to any system running a Linux kernel where network filesystems that employ the netfs layer are active, regardless of distribution or vendor.

The EPSS score is below 1 %, indicating a very low probability of exploitation in the wild, and there are no known public exploits or KEV status. The weakness requires kernel execution privileges to trigger, so the impact is local. No remote attack surface is exposed. Although the technical severity is limited by the low EPSS, the potential for resource exhaustion warrants timely remediation.