The Linux XFS filesystem contains a flaw in which the xfarray and xfblob destructors are invoked without confirming that the pointer is valid. This use‑after‑free can corrupt kernel memory. If an attacker can cause the buggy destructor path to run, the kernel may crash or an attacker could gain execution at kernel privilege level, leading to denial of service or privilege escalation.

All Linux kernel releases that incorporated the buggy XFS logic are impacted. This includes kernels from 6.9 and 6.10 as well as earlier releases that had not yet received the patch. Any system running these kernels with XFS support is vulnerable.

The CVSS score of 7.0 indicates a moderate‑to‑high severity. The EPSS score is below 1 % and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that an attacker would need to trigger XFS file operations that exercise the destructor paths, implying a local or privileged access requirement. If unpatched, the risk remains substantial; patching mitigates the vulnerability.