In the Linux kernel erofs filesystem, a flaw in the handling of trailing dirents can cause an out‑of‑bounds read when a crafted name offset exceeds the buffer size. This allows a maliciously constructed erofs image to expose kernel memory contents, potentially leaking sensitive data and enabling further exploitation.

All Linux kernel images that include the erofs module without the recent patch are potentially affected. The advisory does not list specific kernel versions, so any unpatched system running erofs may be vulnerable.

The EPSS score is not available and the CVE is not listed in the CISA KEV catalog. No CVSS score is provided, so the quantified severity is unknown. Exploitation requires a crafted EROFS image; thus the likely attack vector is local, potentially requiring elevated privileges to mount the file system. An attacker with local access could read arbitrary kernel memory, which might be used to gain higher privileges.