An unchecked array index in the ocfs2_sum_rightmost_rec function causes the kernel to compute an out‑of‑bounds index when l_next_free_rec is set to 0 or exceeds the available record count. The resulting read of l_recs[i] triggers a UBSAN panic during the next file write, bringing the entire kernel down. The vulnerability arises from an out‑of‑bounds array access (CWE-787).

Any Linux kernel that includes the OCFS2 filesystem is potentially affected, regardless of vendor. Because the flaw exists in core ocfs2 code and no specific version range is listed, all current kernels that support OCFS2 should be considered at risk.

The EPSS score is below 1%, and the vulnerability is not listed in the CISA KEV catalog, indicating a low probability of known exploitation. The CVSS score of 7.8 denotes high severity. Exploitation would require an attacker to introduce a corrupted extent list, for example by writing malicious data to the OCFS2 block device or exploiting a separate corruption vector. The kernel crash causes immediate denial of service to all services on the impacted node, making the risk significant even though the attack vector is relatively narrow.