The Linux kernel’s Btrfs filesystem contains a double‑free bug in the create_space_info() routine. When a failure occurs after kobject_init_and_add() has partially initialized a kobject, the code frees the same memory block twice – first explicitly with kfree() and then again via the kobject release callback. This improper deallocation can cause kernel memory corruption. The CVE description does not provide evidence of arbitrary code execution or other specific impacts beyond the potential for memory corruption.

All Linux kernel builds that include the Btrfs filesystem and lack the upstream commit that removed the double‑free flaw are affected. No specific version range is listed; any kernel lacking the fixed commit in stable or mainline branches should be examined. The vulnerability is tied to the Linux kernel product, regardless of distribution or vendor, as long as Btrfs is enabled.

The EPSS score of less than 1% indicates a very low likelihood that this vulnerability will be exploited in the wild. It is not listed in the CISA KEV catalog, and no publicly documented exploits exist. The flaw’s impact is kernel memory corruption triggered when an error path in Btrfs is exercised. The CVSS score of 7.8 indicates a high severity. While the CVE description does not mention active exploitation, the specific conditions needed to trigger the error path are not detailed.