A reference count underflow bug in the Linux kernel’s dm-thin subsystem can cause the engine to decrement child node reference counts incorrectly while rebalance_children is executed. The result is an inconsistency between the number of pointers to grandchildren nodes and their internal reference counts, leading to kernel errors such as “device mapper: space map common: unable to decrement block”. This flaw can cause the device‑mapper driver to malfunction, potentially leading to data corruption or service disruption for any thin‑provisioned storage device.

The defect is present in the Linux kernel’s device‑mapper thin provisioning component. No specific affected kernel release identifiers are supplied, so the version range that implements the bug is unknown. Systems running a kernel version that includes an unpatched dm-thin implementation are at risk.

No CVSS score is provided and the EPSS score is unavailable, but the issue is listed as not in the CISA KEV catalog. The exploitability is inferred to be local or requires that an attacker can influence thin‑provisioned volumes, which may be possible for privileged users or operating systems that allow the creation or modification of device‑mapper devices. Because the flaw results in a driver error and potential service interruption, the primary risk is denial of service rather than data exfiltration or privilege escalation. The likelihood of widespread exploitation is uncertain, but the impact can be significant for affected workloads with thin‑provisioned storage.