The cachefiles subsystem in the Linux kernel contains a double unlock bug where an error path unconditionally releases a lock that was already released, corrupting the rwsem state. This corruption can cause kernel crashes, unexpected behavior, or denial of service on affected systems.

Any Linux kernel that includes the cachefiles module prior to incorporating the double‑unlock fix is vulnerable. Versions that have not integrated commit 26757dac in the kernel source tree remain exposed, so all unpatched releases that compile cachefiles are at risk.

The CVSS score of 7.8 reflects a high severity of kernel state corruption. The EPSS score of less than 1% indicates a low probability of exploitation in the wild. Based on the description, it is inferred that exploitation would likely require local access to operations that exercise the cachefiles path, such as creating directories in a cachefiles filesystem, but the defect does not provide a privilege‑escalation vector. The vulnerability is not listed in CISA’s KEV catalog, underscoring that no known active attacks target this defect.