Impact
The vulnerability arises when the XFS filesystem superblock contains no log stripe unit; in that case the kernel defaults the in‑kernel log round‑off value to 512 bytes. This undersized value misaligns the transaction log, leading to CRC failures, inability to locate the log tail, unmountable filesystems and, ultimately, loss or corruption of stored data. The flaw is an improper initialization weakness (CWE‑166) combined with an invalid memory access scenario (CWE‑20).
Affected Systems
All Linux kernel builds that include the unpatched XFS code are affected, including generic kernels and the 7.0 release candidates (rc1, rc2, rc3). Any system running one of these kernels with XFS volumes that have a superblock lacking a proper log stripe unit is at risk.
Risk and Exploitability
This issue carries a CVSS score of 8.2 and an EPSS score of less than 1%, indicating high severity with a low likelihood of exploitation in the wild. The likely attack vector is local or privileged access that allows an attacker to write or manipulate a filesystem superblock, for example by using a compromised mkfs tool or by delivering a crafted superblock payload. Based on the description, it is inferred that the exploit requires the attacker to supply a malformed superblock or alter an existing one, which can trigger log corruption and potential data loss.
OpenCVE Enrichment
Ubuntu USN