The Linux kernel contained a flaw in the AFS implementation where modifications to the net\-cells_dyn_ino structure were performed without acquiring the required net\-cells_lock. This omission creates a race condition that can lead to memory corruption, kernel panics, or denial of service if an attacker can orchestrate concurrent modifications. The flaw falls under the CWE category of improper synchronization allowing concurrent data corruption.

The vulnerability is present in the Linux kernel whenever the AFS networking subsystem is compiled and enabled. The affected code path resides in the cells_dyn_ino data structure. Exact version ranges are not provided, so all kernel versions prior to the patch that implement this code are potentially vulnerable.

The CVSS score of 7.8 indicates a high severity flaw, while the EPSS score of less than 1% shows a very low but nonzero likelihood of exploitation. The defect is not listed in KEV. Based on the nature of the race condition, exploitation would require a local privileged or root attacker able to influence kernel data structures, likely through crafted network traffic or exploitation of the AFS mount. While the exact attack vector is not detailed, the lack of proper locking suggests a high severity risk of exploitation leading to denial of service or privilege escalation if the attacker can trigger the race.