The vulnerability exists in the Btrfs file‑system implementation of the Linux kernel. During a leaf lookup, the code incorrectly returns 0 when the next leaf’s key does not match, causing the caller to believe the lookup succeeded. The erroneous success flag can lead to operations on a wrong extent tree item, thereby corrupting the extent tree. This flaw falls under CWE‑393 (Incorrect Error Handling).

All Linux kernel versions that include the Btrfs module are affected, as indicated by the CPE list covering Linux Kernel 6.10 and the 7.0 release candidates. Any system using these kernels with active Btrfs file systems is at risk.

The CVSS score of 7.8 denotes high severity, yet the EPSS score of less than 1% indicates a very low likelihood of exploitation at this time. The vulnerability is not currently listed in CISA’s KEV catalog. Exploitation would likely require local access to a system performing Btrfs operations, and an attacker would aim to trigger the faulty lookup path to corrupt the file‑system. The attack vector is inferred to be local file‑system activity; no remote network exposure is mentioned in the description.