The Linux kernel contained a flaw in the AFS network namespace teardown logic where the work item that maintains the preallocated rxrpc call/connection/peer queue was not properly canceled before incoming calls were disabled (listen 0). Additionally, if the network namespace was being deleted (net->live is false), the functions afs_charge_preallocation() and afs_rx_new_call() did not correctly skip charging or avoid requeuing the charger. This could lead to improper resource handling during namespace teardown. The vulnerability has been resolved by ensuring the cancellation of the preallocation charger and adjusting the charging logic accordingly.

Improper cancellation of the preallocation charger during AFS network namespace teardown could lead to resource mismanagement or inconsistent state within the kernel's AFS subsystem. However, no specific exploitation or impact details are provided, and no known exploits are reported in the wild.

A fix has been implemented in the Linux kernel to address this vulnerability. Users should apply the official kernel updates that include this patch. Since no patch links or vendor advisories are provided, check the Linux kernel mailing lists or official repositories for the relevant fix. Patch status is not yet confirmed in the provided data — check the vendor advisory for current remediation guidance.