The vulnerability arises in the Linux kernel’s ocfs2 filesystem when listxattr() processes inline and block‑based extended attributes. If the inline names exactly fill the user‑specified buffer, the subsequent block‑xattr pass incorrectly reports a larger size, causing the kernel to copy beyond the allocated space and trigger a bug. The outcome is a kernel panic, effectively locking the system and providing an attacker with a denial‑of‑service capability. The flaw is a classic buffer overrun that fails to validate copy boundaries, leading to system instability.

All Linux kernel versions that implement the ocfs2 filesystem and precede the commit that introduced the fix (936b8834366e). The issue is not limited to a specific distribution but affects any kernel where that commit is absent. Users who are running a kernel that contains ocfs2 must determine whether their version includes the patch; otherwise, they are vulnerable.

With no EPSS score available, exploit probability cannot be quantified, but the impact of a kernel crash is extremely high, rendering the affected system unusable. The vulnerability is not listed in the CISA KEV catalog, suggesting no widely known exploitation at the time of this analysis. Nonetheless, the bug can be triggered by any local or potentially remote component that interacts with ocfs2 metadata, making it a high‑risk flaw. The lack of mitigation options other than patching, combined with the critical nature of a kernel panic, mandates rapid remediation.