The vulnerability is a potential deadlock in the f2fs_balance_fs() function, triggered when the f2fs filesystem is nearly exhausted. A deadlock causes kernel tasks—including writeback workers and file write iterators—to block indefinitely, resulting in system hang or unresponsive state. The persistent blocking can consume CPU cycles and memory resources, impacting availability. The weakness is a classic deadlock due to improper lock ordering or re‑entrancy in kernel code.

The issue is present in the Linux kernel where f2fs is enabled. It has been observed in kernel releases such as 6.12.41. No specific SKU targeting beyond the standard Linux kernel distribution is listed. Any system running pre‑fix kernel binaries that use f2fs as its filesystem is potentially affected.

The problem is a denial of service that manifests at the kernel level; an attacker would need the ability to force the filesystem into a state of near exhaustion, which could be achieved by exhausting disk space or creating large files on f2fs. The EPSS score is 0.00176 (just under 1%) and the vulnerability has not been listed in CISA's KEV catalog, indicating no known active exploits. Nevertheless, any system that has been vulnerable before the fix could suffer a critical service outage if disk space limits are reached. The CVE was patched in upstream kernel commits, giving administrators a clear path to remediation.