The vulnerability occurs in the Linux kernel's sysfs_update_group() function. When updating a named sysfs group, if the create_files() function fails (e.g., due to memory allocation failure), the internal_create_group() function calls kernfs_remove() on the group directory. However, this directory may have existed prior to the update call, and removing it silently deletes a sysfs group that the caller did not create. The patch changes this behavior to remove the directory only if it was created by the current operation, leaving existing directories intact even if the update fails.

Unintended removal of existing sysfs directories during update failures could lead to loss of sysfs group entries, potentially affecting kernel subsystems or user-space components relying on those sysfs entries. This could cause system instability or unexpected behavior. There is no indication of remote exploitability or privilege escalation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description indicates that a fix has been implemented to prevent removal of existing directories on update failure. Users should apply the official Linux kernel updates once available to ensure this issue is resolved.