The vulnerability lies in the AFS file system kernel code where the function afs_edit_dir_remove() used the wrong helper, afs_dir_find_block(), to obtain block 0. This function caches the found block and can switch out the page it occupies when another find operation occurs. As a result, operations on block 0 may act on an unexpected or stale page, leading to data corruption or integrity failures when removing directories. The bug is analogous to the add operation, which correctly uses afs_dir_get_block(). Apart from the risk of corrupted filesystem metadata, a compromised kernel could potentially expose sensitive data or increase the impact of other attacks.

All Linux kernel builds that include the AFS module without the applied fix are affected. The specific versions impacted are not enumerated in the advisory, so any release prior to the patch that ships the faulty code may be vulnerable.

No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, indicating a lack of confirmed exploits. The CVSS score is not provided, but the nature of the flaw—potential data corruption within a privileged kernel module—suggests a high severity if exploited. The attack vector appears to require local access with the ability to trigger afs_edit_dir_remove(), likely through AFS operations or vulnerable applications that manipulate AFS directories. With the current absence of public exploits, the immediate risk level is moderate, but it should be treated with urgency in environments that rely on the AFS file system.