Impact
The vulnerability stems from a logic error in the Btrfs filesystem’s chunk‑allocation routine. When the kernel attempts to allocate a new chunk and the internal chunk map contains non‑consecutive gaps, the routine mistakenly reports an EEXIST condition (error ‑17). This causes the Btrfs transaction to abort, resulting in a failed write operation. The flaw does not provide a path to code execution or privilege escalation; it simply disrupts normal filesystem activity. An attacker who can write to a Btrfs volume could repeatedly trigger the abort, leading to denial of service for that volume.
Affected Systems
The flaw exists in the Linux kernel, affecting all distributions that ship an unpatched kernel before the fix is merged. No explicit version list is supplied in the advisory, but the bug was observed on kernel 6.19.0‑rc6+. Therefore, any system running a kernel version before the patch, regardless of distribution, is potentially vulnerable.
Risk and Exploitability
The vulnerability is not cataloged in CISA KEV and no EPSS score is publicly available, so exploitation likelihood is uncertain. Because the issue appears during normal write operations to a Btrfs volume, an attacker with write access can reliably induce a transaction abort by performing operations that trigger the faulty allocation logic. Although no known exploits exist, the repeated transaction failures degrade availability, making the risk moderate to high for exposed environments.
OpenCVE Enrichment