In the Linux kernel, the netfs_unbuffered_write() routine contains a reference leak that can occur when a subrequest’s I/O iterator is zero length. This condition prevents the decrement of a reference count, allowing kernel memory usage to grow over time. While there is no direct code execution flaw, the long-term consequence is resource exhaustion, which may destabilize the system and cause a denial of service when kernel memory limits are reached.

The flaw affects any Linux kernel that incorporates the netfs_unbuffered_write() path. The data does not specify affected kernel releases; therefore, we infer that all distributions and patch levels that still include this routine without the patch are potentially vulnerable.

The CVSS score of 5.5 classifies this as a moderate severity vulnerability, while an EPSS score of less than 1% indicates a low probability of exploitation. The flaw is not listed in the CISA KEV catalog. Exploitation would require the ability to repeatedly send zero-length I/O requests, which we infer likely necessitates local or privileged access. Without a large‑scale attack tool, the risk remains moderate, yet persistent exploitation could culminate in a service denial through kernel memory exhaustion.