The vulnerability resides in the XFS AGI repair routine of the Linux kernel. When the buffer verifier fails, the function xrep_iunlink_walk_ondisk_bucket may try to walk ragi->sc->sa.agi_bp while that pointer is null. Dereferencing a null pointer in kernel space results in a kernel crash, causing a complete denial of service for the affected system. The flaw does not provide privilege escalation or data exfiltration; its impact is limited to service interruption.

All builds of the Linux kernel that include the XFS filesystem driver are potentially exposed, as the flaw is part of core XFS code. The advisory references commit hashes that fix the issue, meaning that any kernel release that incorporates those commits—usually the latest stable kernel versions—removes the problem. Systems running older kernels that have not yet applied the patch remain affected.

Based on the description, the CVSS and EPSS scores are not provided, and the flaw is not listed in the CISA KEV catalog. Based on the description, exploitation would require an attacker able to trigger an AGI repair operation or manipulate XFS metadata so that the buffer verifier fails. It is inferred that such actions would likely need local or privilege escalation. No publicly demonstrated exploit exists; however, a local attacker could induce a crash to interrupt services. Given the severity of a kernel null pointer dereference, the risk remains significant for systems that have not yet applied the fix.