In the Linux kernel GFS2 filesystem, a use‑after‑free occurs between the start of an inline data write path and its completion. The inline data buffer head is released too early while the write operation still holds a pointer to its data, leading to a memory corruption when the kernel attempts to copy data into a freed page. This flaw can allow an attacker to write arbitrary data to kernel memory, potentially escalating privileges or executing arbitrary code.

The vulnerability affects the Linux kernel. No specific kernel version range is listed; the flaw exists wherever the gfs2 inline data writing logic remains unpatched. All installations of Linux using the GFS2 filesystem are potentially impacted.

The CVSS score is not provided, but the nature of the flaw combined with its kernel context indicates high severity. The exploit probability (EPSS) is not available, and the vulnerability is not listed in CISA’s KEV catalog, which suggests no confirmed exploitation yet. Attackers would likely need to trigger the faulty inline data write path through a local filesystem operation, so local privilege is required; however, the kernel memory write may be leveraged for privilege escalation or arbitrary code execution.