The kernel processes an ADFS image with a zero zone count during boot block validation. adfs_read_map() passes the zero value to kmalloc_array, which returns a null or zero‑size pointer. Subsequent code then writes to an invalid memory offset, resulting in an out‑of‑bounds write that can corrupt kernel memory or crash the system. Such corruption could provide an attacker with a foothold to elevate privileges or execute arbitrary code if additional steps are taken to exploit the overwritten data.

Any Linux kernel configuration that supports ADFS file system images is potentially vulnerable. No specific kernel versions are enumerated in the advisory; users should assume that all kernels that have not been updated with the patch that adds the nzones check are affected.

The vulnerability has a severe potential impact, but the exploitation path requires booting from a crafted ADFS image or loading a manipulated image during system startup. The EPSS score is not available, and the advisory is not listed in KEV. Without a publicly known exploit, the risk is primarily theoretical, yet the out‑of‑bounds write is a classic kernel buffer overflow that could lead to privilege escalation if successfully harnessed.