The erofs filesystem contains a race condition that is triggered when unaligned compressed extents are processed concurrently. Two threads can add the same folio to the file map while the folio's private data still indicates it is pre‑allocated, allowing the second thread to write the folio again before the first has cleared the flag. This flaw, identified as CWE‑367, can corrupt filesystem data structures and potentially lead to a denial‑of‑service if the filesystem becomes unusable.

All versions of the Linux kernel that support the erofs filesystem with unaligned compression (for example, the -E48bit zstd mode). The vulnerability exists in any kernel build preceding the commit that clears folio->private before the folio is exposed to the managed cache. Vendors affected are simply Linux kernel releases; no specific product names or version ranges are listed in the CNA data.

The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1 % suggests a low probability of real‑world exploitation. The vulnerability is not currently listed in the CISA KEV catalog. Based on the description, the likely attack vector requires an attacker with write access to an erofs partition that has unaligned compression enabled; by triggering concurrent writes, the attacker can induce the race, potentially corrupting data or rendering the filesystem inoperative. Consequently, the risk is moderate to high for affected systems, but active exploitation would be uncommon unless the attackers target specific deployments with this configuration.