The Linux kernel’s AFS filesystem had an improper initialization of the work_struct that protects an inode. The structure was initialized once during inode allocation but was not reset when the inode was reused, causing sporadic debug warnings such as "activate not available" and leaving the work_struct in an undefined state. This can lead to kernel inconsistencies or corruptions if the worker is unexpectedly executed, potentially compromising system stability.

Any Linux kernel build that incorporates the AFS filesystem and has not applied the commit chain referenced in the supplied Git URLs is affected. This includes generic kernels, distribution kernels, and custom builds where AFS is enabled, regardless of kernel version.

The CVSS score of 7.8 indicates high severity, and the EPSS score of <1% shows a very low exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local privileged execution within the kernel context, as the flaw requires kernel access and cannot be triggered remotely. Because the issue is tied specifically to the AFS module, the overall risk to environments that do not use AFS is low, but systems that do rely on AFS should address the vulnerability promptly.