The erofs filesystem contains logic that misclassifies plain data extents whose on‑disk physical length is misaligned to the block size; these are incorrectly treated as interlaced extents and processed by z_erofs_transform_plain. This flaw triggers an out‑of‑bounds read, exposing kernel data that may include sensitive information, an exemplification of CWE‑787.

Any Linux kernel installation that uses the erofs filesystem and has not incorporated the commit referenced in the advisory is affected. Since no explicit version range is provided, all distributions shipping a kernel prior to the fix are potentially vulnerable, regardless of the underlying distribution vendor. Systems that mount or load erofs images, particularly from untrusted sources, fall under this risk.

Based on the description, the vulnerability is triggered when the kernel processes a crafted erofs image containing plain extents with unaligned physical lengths. It is inferred that a local or privileged attacker who can mount or load such an image can exploit the flaw to read memory beyond the intended buffer (CWE‑787). Remote exploitation would require a service that accepts arbitrary erofs images, which is uncommon. The CVSS score of 7.1 indicates significant impact, while the EPSS score of < 1% shows a low probability of exploitation. The CVE is not listed in CISA KEV, so no active exploitation is known, but the potential information disclosure could provide a foothold for further attacks.