The vulnerability is a buffer overflow in the dm‑verity‑FEC component of the Linux kernel, where an out‑of‑bounds write occurs on the syndrome buffer during reed‑solomon decoding. This overflow can corrupt adjacent kernel memory, potentially leading to kernel crashes or data corruption. If the attacker can influence the data processed by dm‑verity, the memory overwrite could be used to hijack kernel execution and elevate privileges. This weakness is reflected in CWE‑787.

All Linux kernel builds that include the dm‑verity module before the upstream patch are affected. The vulnerability is present in any kernel version that did not incorporate the fix found in the most recent kernel release. Devices that rely on dm‑verity for boot or filesystem integrity are therefore impacted.

The CVSS score of 9.8 signals critical severity, while the EPSS score of less than 1 % and absence from the CISA KEV catalog indicate limited public exploitation. The likely attack vector involves local interaction with a dm‑verity device during boot or while mounting a verified filesystem. This inference comes from the fact that dm‑verity operates at kernel level. Exploitation would require the ability to influence dm‑verity processing, which typically requires local or elevated privileges. Given the criticality and the low probability of exploitation, administrators should prioritize patching.