In the Linux kernel, the netfs_invalidate_folio function contains a logic error where a partial invalidation of a streaming‑write folio leads to an incorrect adjustment of the dirty region. The code sets the start of the dirty offset instead of the end of the invalidation region, which can result in incorrect handling of dirty data in the underlying storage. This flaw is classified under CWE‑823 and results in a data integrity issue.

All Linux kernel versions that include the netfs module and have not yet integrated the commit that fixes this logic are affected. The fix is present in downstream distributions that update their kernel past the commit where the bug was patched. Until kernels incorporate this change, any system using the netfs filesystem with the flawed code remains vulnerable.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of less than 1 % shows a very low probability of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that exploitation requires a process capable of performing a partial invalidation on a streaming‑write folio, typically a local or compromised user‑space process interacting with NFS or other network filesystems. Consequently, while the risk to data integrity exists, the likelihood of a widespread attack is low.