The Linux kernel includes a use‑after‑free condition in the GFS2 filesystem’s quota data handler (CWE‑416) that also mismanages the least‑recently‑used list (CWE‑911). When the qd_put() routine removes quota data objects from the LRU list without unlinking them, the list becomes corrupted. If the gfs2_qd_shrink_scan shrinker later attempts to access those freed objects—particularly during a filesystem shutdown—a use‑after‑free can corrupt kernel memory, potentially allowing an attacker to execute arbitrary code in kernel mode.

The flaw affects any Linux kernel that contains the GFS2 filesystem and does not yet incorporate the fix introduced in commit a475c5dd16e5. This includes a broad range of distribution kernels and custom builds compiled from source without the patch. No specific version bounds are provided, so any kernel prior to the hotfix is potentially vulnerable.

The CVSS score of 7.8 signals a high severity, while the EPSS score of < 1% indicates a very low likelihood of exploitation. The vulnerability manifests during a shutdown sequence of a GFS2 volume and it is inferred that it may require local or physical access to trigger. Though no public exploit is known and it is not listed in the CISA KEV catalog, kernel memory corruption could lead to code execution in privileged mode if successfully leveraged.