In the Linux kernel, the netfs_unbuffered_write() routine contains a reference leak that can be triggered when a subrequest’s I/O iterator is zero length. This condition prevents the decrement of a reference count, allowing kernel memory usage to grow over time. Although there is no direct code execution flaw, prolonged exposure can lead to resource exhaustion, potentially destabilizing the system and causing a denial of service when kernel memory limits are reached.

The flaw affects any Linux kernel that incorporates the netfs_unbuffered_write() path. The CVE data does not specify affected kernel releases; therefore, all distributions and patch levels that have this routine without the patch are potentially vulnerable.

The CVSS score of 5.5 classifies this as a moderate severity vulnerability, while an EPSS score of less than 1% indicates a low probability of exploitation. The flaw is not listed in the CISA KEV catalog. Exploitation would require the ability to repeatedly send zero‑length I/O requests, likely necessitating local or privileged access. Without a large‑scale attack tool, the risk remains moderate, yet persistent exploitation could culminate in a service denial through kernel memory exhaustion.