The vulnerability arises from an incorrect bounds check in the ext4 filesystem’s check_xattrs() function. The comparison used allows a pointer to come within the size of an unsigned 32‑bit value of the buffer’s end, after which a 4‑byte read occurs that overruns the intended extended attribute region. This leads to an out‑of‑bounds read in kernel space. The CVE description does not elaborate on additional effects beyond the read, but the weakness falls under improper bounds validation and buffer over-read.

All Linux systems running kernel versions that contain the unpatched ext4 driver are affected. The kernel’s CPE string indicates coverage of the entire Linux kernel family, and no specific vulnerable versions are listed in the CVE data, so any build prior to the linked patch commit should be considered vulnerable.

No CVSS score is provided and the EPSS score is not available, so the exploitation likelihood cannot be quantified. The vulnerability is not included in the CISA KEV catalog, indicating no documented mass exploitation. Triggering the out‑of‑bounds read requires the kernel to process extended attributes on an ext4 volume. The exact conditions that activate the vulnerable code path are not specified in the CVE, so the precise attack vector remains unspecified. Based on the description, it is inferred that the kernel must perform the check during normal filesystem operations such as mounting or reading the filesystem; therefore the flaw likely requires local or privileged access to bring the code path into play.