The vulnerability originates from incorrect calculation of transaction credits during ext4 filesystem writeback. Insufficient credits can cause transaction overflow, leading to a failure to write extent data and potentially corrupting the file system. This flaw does not provide direct code execution but can alter file data integrity, leading to data loss or system instability.

The issue affects Linux kernel implementations that use the ext4 file system. While specific kernel versions are not enumerated in the provided data, any Linux distribution running a kernel prior to the application of commit 95ad8ee45cdb is susceptible. The affected product is the Linux kernel; the vendor is Linux:Linux.

The CVSS score is 5.5, and the EPSS score is less than 1%, indicating a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because it is a local filesystem issue, the attack vector is likely limited to privileged or compromised systems where an attacker can trigger a writeback of a large, dirty folio. The risk is moderate; a successful exploit could cause transaction overflow, leading to filesystem corruption or denial of service.