During eventfs directory list heads of the eventfs_inode. When cleanup occurs after a memory‑pressure induced allocation failure, the routine incorrectly reports that the inode has child objects, producing a false warning. This flaw does not enable arbitrary code execution, privilege escalation, or compromise confidentiality, integrity, or availability; it is a non‑exploitable diagnostic issue classified as CWE‑824.

The vulnerability resides in the core Linux kernel source. All distributions that ship the upstream kernel, including the Linux Linux vendor, are affected. The issue applies to any kernel build prior to the inclusion of commit 1704aaaf5d22bc, which relocates the list initialisation into init_ei(). Vendors that provide customized kernels should ensure the patch is integrated or compile with the updated source.

The EPSS score is listed as less than 1 %, indicating a very low probability that the flaw would be actively exploited. The flaw is not listed in CISA’s KEV catalog. The likely attack vector would involve an attacker inducing memory pressure that causes eventfs_create_dir() to fail and trigger the erroneous warning an exploitable condition. Consequently, the overall risk is low and the impact is limited to a misleading diagnostic message.