A failure in the XFS attribute recovery routine causes the release code to run on a dangling pointer when an inode reference cannot be obtained. This results in a use‑after‑free condition that corrupts kernel memory and can trigger a panic. The flaw is a classic use‑after‑free memory corruption (CWE‑416) and also involves improper handling of a null pointer (CWE‑825).

All Linux kernel releases that include the XFS filesystem are potentially impacted, including the mainline kernel and the 7.0 release candidates. No vendor‑specified version range is listed, so any installation using an unpatched kernel remains at risk until the patch is applied.

The CVSS score of 7.8 indicates a high severity issue, while the EPSS score of < 1% suggests a very low likelihood of exploitation in the wild. The flaw is not listed in the CISA KEV catalog. The attack vector is likely local or requires the attacker to corrupt the filesystem or manipulate disk errors to trigger the recovery path, which typically demands local or privileged access. Due to its potential to bring the entire system down, administrators should treat it as an urgent risk even in the absence of a publicly available exploit.