The vulnerability lies in the AFS file system kernel code where the function afs_edit_dir_remove() used the wrong helper, afs_dir_find_block(), to obtain block 0. This function caches the found block and can switch out the page it occupies when another find operation occurs. As a result, operations on block 0 may act on an unexpected or stale page, leading to data corruption or integrity failures when removing directories. The bug is analogous to the add operation, which correctly uses afs_dir_get_block(). The vulnerability could lead to filesystem metadata corruption when block 0 is operated on incorrectly, potentially causing integrity failures during directory removal.

All Linux kernel builds that include the AFS module without the applied fix are affected. The specific versions impacted are not enumerated in the advisory, so any release prior to the patch that ships the faulty code may be vulnerable.

The EPSS score is <1%, implying a low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed exploits. The CVSS score of 5.5 indicates a moderate severity. The attack vector appears to require local access with the ability to trigger afs_edit_dir_remove(), likely through AFS operations or vulnerable applications that manipulate AFS directories. With the current lack of public exploits, the immediate risk level remains moderate, but it should be treated with urgency in environments that rely on the AFS file system.