The vulnerability involved the netfs interface of the Linux kernel, specifically the writethrough path. A missing flag caused synchronous O_SYNC writes to bypass the offload collection mechanism, which normally aggregates write requests for asynchronous processing. As a result, some writes could be delayed until the end of the transaction or not collected at all, potentially leading to increased latency or unexpected ordering of write operations. The description does not indicate remote code execution or privilege escalation, but the flaw may compromise data integrity or performance in systems performing frequent O_SYNC operations.

All Linux kernel releases are affected until the kernel version that includes the patch. The patch is distributed through the official Linux kernel source tree and should be present in any mainstream distribution that upgrades to a kernel containing the commit "netfs: Fix writethrough to use collection offload."

The CVSS score is 5.5 and the EPSS score is <1%, indicating a moderate severity and low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because the flaw resides in a core kernel subsystem and requires legitimate write access to affected files, it is not likely to be exploitable remotely. The risk, however, lies in degraded write performance or subtle data consistency issues in environments that heavily use O_SYNC writes over netfs. The likely attack vector is local or privileged access that can exercise the netfs writethrough path.