The vulnerability in the Linux kernel OCFS2 filesystem allows an attacker to override the destination location for an extent copy operation, enabling the copying of file data into a cluster already allocated to another inode. This results in accidental overwriting of data owned by a different file, leading to data corruption and loss. The weakness is an improper validation of the requested physical allocation goal, classified as CWE‑367.

All Linux kernel releases that ship with the OCFS2 driver are affected because the issue resides in the ocfs2_move_extent routine which is part of the kernel's filesystem code. The product line is "Linux Kernel". No specific version ranges are supplied, so any kernel that contains the unpatched ocfs2 code is vulnerable.

Based on the description, the attack vector is inferred to be a privileged kernel ioctl that moves extents on a mounted OCFS2 filesystem. The vulnerability requires that the attacker can invoke this ioctl, which is normally limited to privileged users or processes running with elevated permissions. If an attacker supplies a malicious goal, the function may erroneously write over clusters belonging to other files, potentially causing widespread data loss or a denial‑of‑service condition for the filesystem. The risk is elevated in environments where OCFS2 is used in shared or multi‑tenant clusters and where untrusted users have the ability to execute privileged system calls. The CVSS score is 7.8, and the EPSS score of <1% indicates a very low but nonzero exploitation probability, so the precise severity and exploitation probability cannot be quantified. Additionally, the vulnerability is not listed in the CISA KEV catalog.