A flaw in the Linux erofs filesystem handling caused early exits when processing invalid metabox‑enabled images with metadata compression enabled, leading to folio reference leaks. The leaked references reveal memory addresses, enabling potential information disclosure and may aid attackers in exploiting other weaknesses (CWE‑911). The issue does not trigger a crash or other severe instability, but the leakage provides a possible vector for attackers seeking kernel memory visibility that could facilitate further exploitation.

All versions of the Linux kernel that use the erofs filesystem before the patch are potentially affected. No specific kernel releases are listed, meaning any distribution kernel embodying the unpatched code may be vulnerable.

The CVSS score is 5.5, reflecting a moderate impact. The EPSS score is <1% and the vulnerability is not listed in CISA KEV. An attacker would need to craft a malicious EROFS image with compressed metadata and deliver it to a system that mounts or inspects that image, so the threat is primarily local or privileged rather than remote. While the impact is limited to memory reference disclosure, the potential for leaking kernel address space could aid further exploitation if combined with other weaknesses.