The vulnerability in the Linux kernel ext2 filesystem driver arises because ext2_dio_write_iter() ignores the error returned by generic_write_sync(). When write(2) is executed on files opened with O_SYNC or O_DSYNC, the system call can falsely report success even if the underlying disk operation fails. This flaw, an instance of CWE‑252 unchecked‑return‑value, undermines the reliability of data written to ext2 volumes and can lead to inadvertent data loss or corruption.

Affected systems are all Linux kernel builds that contain the ext2 filesystem module on which the flaw exists. Vendors and products are listed simply as Linux and the Linux kernel. No specific version numbers are supplied; any kernel revision that includes the unpatched ext2_dio_write_iter() prior to the fix is potentially vulnerable.

The CVSS score is 5.5, indicating moderate severity, while the EPSS score of less than 1% and absence from the CISA KEV catalog suggest a low probability of active exploitation. The flaw does not grant privilege escalation or arbitrary code execution; it is exploitable only when a sync operation is forced to fail through workload or hardware issues, with the attacker learning that writes are acknowledged when they are not. As a result, the risk is mainly data integrity loss rather than system compromise.