The flaw occurs in f2fs_read_data_large_folio() when a large folio encounters an error before its blocks are added to the bio. The pending bio is never submitted, causing readers to wait indefinitely for read completion. This results in a denial of service affecting any process that reads large files from an f2fs mount. The weakness is a resource exhaustion race condition identified as CWE-833.

Linux kernel implementations that use the f2fs filesystem prior to the inclusion of the patch. All users of f2fs on the Linux kernel are potentially impacted, regardless of version, because the vendor product and affected versions are not enumerated in the report.

The EPSS score is less than 1%, indicating a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, requiring code execution within the kernel, typically via read operations on f2fs. The CVSS score is not provided, but the denial of service impact is significant.