The kernel's FITRIM handling for OCFS2 mistakenly accepts trimming ranges that are shorter than a filesystem cluster because the validation only checks the block size. A range that is a single block but smaller than a cluster is shifted so that its length becomes zero, and subsequent arithmetic that calculates the final end of the trim underflows. This can cause the kernel to trim past the requested range, potentially deleting or corrupting data that was not intended to be discarded. The weakness is a flaw in integer arithmetic and range validation, leading to integrity compromise of the filesystem.

Linux kernel implementations that include the OCFS2 filesystem. No specific affected kernel versions were provided in the data; it is inferred that any kernel before the commit that introduced the fix may be vulnerable. Consult the referenced commit history to determine when the fix was applied. All systems running kernel versions prior to the fix that use OCFS2 may be vulnerable.

Based on the description, it is inferred that the vulnerability is local and requires write access to an OCFS2 filesystem. Exploitation would involve issuing a FITRIM ioctl with a carefully crafted range that is shorter than the cluster size. The CVSS score of 7.1 indicates a high severity level, while the EPSS score is low (<1%) and the vulnerability is not listed in CISA's KEV catalog. Because the flaw can cause data loss or corruption, the impact is significant for the integrity of files on the affected filesystem. While not universally exploitable by an unauthenticated attacker, a privileged user or process with write access can trigger the flaw, making timely patching critical.