The Linux kernel’s AFS cache manager could process CB.InitCallBackState3 callback requests without first verifying that a server record was attached. This missing validation could allow a null‑pointer dereference, leading to a kernel crash or unpredictable behavior, resulting in denial of service for services relying on AFS callbacks. The weakness is a null‑pointer dereference.

All Linux kernel releases that implement the AFS cache manager before the patch are affected. The vulnerability resides in the kernel itself, so any system that uses AFS for file sharing or coordination services and is running an unpatched kernel is susceptible. The affected product is the Linux kernel, specifically its AFS cache manager component. Vendor is Linux.

The CVSS score of 7.5 marks this flaw as high severity. The EPSS score of < 1% indicates a very low likelihood of exploitation, and it is not listed in the CISA KEV catalog. The likely attack vector is the RxRPC protocol, inferred from the callback handling context. Based on the description, it is inferred that the flaw could be triggered by sending crafted CB.InitCallBackState3 callback requests over RxRPC, leading to a kernel crash and denial of service. Administrators should therefore treat this as a high‑impact kernel bug with a modest exploitation probability.