The vulnerability is a concurrency flaw in the Linux kernel’s netfs component, where the function netfs_advance_writethrough() may leave a folio locked and dirty during write‑through mode. This causes a deadlock when an mmap read or write holds conflicting locks, potentially blocking the kernel and any user processes that interact with the affected filesystem. The impact is a denial of service because operations that rely on the netfs filesystem can stall indefinitely, though the flaw does not expose data to an attacker.

All Linux kernel implementations are vulnerable because the advisory lists the generic Linux kernel CPE without version restrictions. The flaw affects the kernel’s netfs component, which is deployed across most distributions and hardware platforms that use the standard kernel and therefore can affect any system running a recent kernel.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% signifies a very low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The condition required to trigger the deadlock involves concurrent mmap reads and writes to a netfs volume that has the write‑through option enabled, indicating that the attack vector is local – an attacker with user or privileged access could provoke the deadlock by performing such operations. This inference is based on the description’s mention of concurrent mmap activities. Although complex, this scenario would cause a system hang; thus the immediate risk remains modest, yet a patch should not be postponed.