The flaw in the Linux kernel’s AFS subsystem is a resource‑management error that increments the network cells outstanding counter before confirming that the idr_alloc_cyclic allocation succeeded. When the allocation fails, the counter is still increased, causing the kernel to believe more cells are in use than actually are. This miscount can lead to an over‑estimation of resource usage, potentially triggering unintended resource exhaustion or degraded performance for the affected system.

The vulnerability affects the Linux kernel, specifically the AFS network cell management code. Precise affected versions are not listed, but the bug applies to all kernel releases prior to the inclusion of the patch described in the input. Systems running any recent Linux kernel without the update are potentially affected.

Based on the description, it is inferred that the vulnerability could enable a local denial‑of‑service condition by causing the kernel to over‑estimate the number of network cells in use. The CVSS score of 5.5 indicates medium severity. No information indicates remote exploitation or privilege escalation, so the likely attack vector is local. The EPSS score of < 1% suggests a very low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog.