In the Linux kernel, the gfs2 filesystem suffered from two memory leaks in the gfs2_fill_super error handling path. When a transition to read‑write mode fails, kernel threads and quota bitmap buffers are left allocated, potentially exhausting kernel memory and leading to system instability or denial of service.

This issue affects any Linux kernel that includes the gfs2 filesystem and has not yet incorporated the commit that moves thread cleanup to the fail_per_node label and adds quota cleanup. The exact version range is not specified, but all kernels prior to the patch are vulnerable.

The EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog. Given the lack of publicly documented exploits, the current exploit likelihood is uncertain, yet the severity of the resource depletion could allow a privileged attacker or an application with mount privileges to destabilize the system. The likely attack vector is through the kernel mount interface, requiring access that can influence kernel operations.