Impact
The Linux kernel vulnerability involved the AFS network namespace teardown path, where the preallocation charger work item was not cancelled when a namespace was removed. This oversight could leave resources allocated beyond the intended lifetime, constituting a resource‑leak weakness (CWE‑772). The CVE description does not explicitly state any denial of service or other consequence, therefore the precise impact is not declared in the official data.
Affected Systems
All Linux kernel releases that include the AFS networking implementation and have not yet integrated the commit that adds the charger‑cancellation logic (identified by the hash 47694fbc9d24…) are affected. The vulnerability targets the netns teardown code path under the AFS subsystem.
Risk and Exploitability
The CVSS score of 9.8 signals a high severity assessment, while the EPSS score of < 1% indicates a very low probability of public exploitation at present. It is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation would likely require local or privileged access to create or delete AFS network namespaces, after which the lingering charger could consume kernel resources or impair networking operations.
OpenCVE Enrichment