This kernel vulnerability occurs in the netfs file‑system helper library. The oversight allows the remote size parameters remote_i_size and zero_point to be updated without holding the i_lock, potentially corrupting the i_size_seqcount and causing file‑size tearing. The result is integrity failure and possible corruption of files accessed via netfs. The weakness is classified as CWE‑821, reflecting insufficient synchronization.

All Linux kernel distributions are affected, as the issue resides in the core kernel code shared across all vendor builds. Any system running a kernel version prior to the fix, as identified by the commit referenced in the advisory, must be updated. No specific product version list is provided, so the rule of thumb is that if your kernel has not been patched with the recent netfs changes, it is vulnerable.

The CVSS score of 9.8 marks the issue as critical. However, the EPSS score of less than 1% suggests that exploit activity is extremely unlikely at present. The vulnerability is not listed in the CISA KEV catalog, indicating that no known exploits have been observed in the wild. Attack likely requires local privileged access or the ability to mount netfs filesystems; the description does not detail a remote exploitation path, so the potential is primarily local. Consequently, the risk is high in the presence of unprivileged user operations on netfs, but the exploitation probability remains low.