The vulnerability occurs in the Btrfs filesystem of the Linux kernel when a relocation root node is inserted. A mapping node is allocated before insertion, but if a duplicate root is detected the insertion routine returns without freeing the newly allocated node. Because this node is never linked into the reloc_root_tree, subsequent cleanup never releases it, resulting in a memory leak. The callers of the routine normally assert that duplicate insertions should never occur, making this a defensive code path for an unexpected condition.

Any host running a Linux kernel that includes the Btrfs filesystem and whose kernel has not yet incorporated the upstream patch contains this bug. The vulnerability affects all distributions that ship the vulnerable kernel version, without a specific version range specified in the CVE data.

The CVSS score of 5.5 indicates a moderate severity, and the EPSS score of less than 1% suggests exploitation probability is currently low. The vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly detailed, but the defensive nature of the code path implies that reaching it would require an unexpected duplication during Btrfs operation. No known vectors for exploiting the memory leak are reported in the CVE description.