The Linux kernel contains a defect in the netfs writeback iterator where errors during writeback are not correctly handled. The iterator must be rerun with the error code to clean up iteration state, unlock the involved folio, and re‑dirty it. If this logic is omitted, the kernel can reach an inconsistent state that may lead to a crash or denial of service. The error stems from insufficient error handling and from improper release of resources (CWE‑772).

Any Linux kernel incorporating the netfs subsystem and compiled with the standard writeback iterator is potentially affected. Because no specific version constraints are supplied by the CNA, all current unpatched kernels that include netfs may be vulnerable. Users running an updated kernel that includes the fix have addressed the risk.

The EPSS score is below 1 %, indicating a very low probability of exploitation at the time of analysis. The CVSS score of 7.1 reflects moderate severity, while the vulnerability is not listed in the CISA KEV catalog, and there is no evidence of active exploitation. Based on the description, it is inferred that an attacker could trigger a writeback error by influencing network‑file‑system traffic or forcing a large number of dirty pages, but this inference is not explicitly documented in the advisory. The risk is a local or remote denial of service that requires the ability to cause or observe a writeback failure in the netfs subsystem.