Impact
The vulnerability is a logic error in the Linux kernel’s Btrfs chunk‑allocation routine. When a new chunk is requested and the internal chunk map contains non‑consecutive gaps, the routine incorrectly signals an EEXIST (error‑17) condition. This causes the Btrfs transaction to abort, aborting the write operation and returning an error to the caller. The flaw does not provide a path to code execution or elevation of privilege; its impact is limited to disrupting normal filesystem activity. Based on the description and typical Btrfs usage, it is inferred that an attacker who can write to a Btrfs volume could repeatedly trigger the abort by performing operations that force the faulty allocation logic, resulting in a denial of service for that volume.
Affected Systems
The bug exists in the Linux kernel and affects any distribution shipping an unpatched kernel prior to the fix. While the advisory does not specify a precise version list, the issue was observed on kernel 6.19.0‑rc6+. Therefore, systems running kernel versions before the inclusion of commit 156cac365e27a82b64ae510c5f463fd81f0265b1 are potentially vulnerable, regardless of distribution.
Risk and Exploitability
The CVSS score of 7.0 indicates a high severity. The EPSS score is less than 1 %, suggesting an extremely low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Because the flaw manifests during normal write operations to a Btrfs volume, an attacker with write access can reliably induce the transaction abort. The resulting availability impact is high, especially in environments where the affected volume is critical for operations. The likely attack vector is a user with write rights performing write operations on the affected volume.
OpenCVE Enrichment