The Linux kernel’s ext4 filesystem lacks cleanup of stale extent entries when an extent split operation fails. Because the drop step is omitted, the extent status tree can retain invalid entries, causing the filesystem state to become inconsistent with the underlying block layout. This error handling failure falls under CWE‑459, reflecting inadequate cleanup.

Any system running the Linux kernel with the ext4 implementation is potentially affected. The advisory does not specify a kernel version range, implying that any kernel compiled after the issue was identified may still contain the flaw until a patch is applied.

The CVSS score of 7.0 indicates high severity. The EPSS score is below 1%, reflecting a very low but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires local or privileged access to trigger an extent split failure, possibly through heavy I/O or malicious file operations. Although no public exploits are reported, an attacker that can induce the error condition could cause filesystem corruption or loss of data consistency.