This vulnerability stems from the Linux kernel’s XFS filesystem failing to release an inode lock when an error occurs during a quota operation. The function xfs_dq_get_next_id() acquires the quota inode ILOCK before attempting to read extents, but if that read fails it returns immediately without unlocking, leaving the inode locked. This lock leak can cause subsequent quota operations to block indefinitely, leading to a denial of service for processes that rely on quota management. The weakness is a classic resource acquisition without release scenario, identified as CWE-772.

Any system running a Linux kernel that supports the XFS filesystem and uses the quota facilities is potentially affected. The CNA vendor list includes Linux:Linux twice, indicating the entire kernel is impacted, but specific kernel versions are not enumerated in the data provided. Consequently, any deployment using the vulnerable code path may be at risk until the patch is applied.

The CVSS score is 5.5, and the EPSS score is unavailable. The denial of service impact indicates that exploitation could be achieved if an attacker can trigger quota queries that hit the error path. Based on the description, it is inferred that an attacker would need to provoke a failure in xfs_iread_extents, which likely requires local or privileged access; however, if the filesystem is exposed remotely, a remote attacker might also cause the error through crafted quota operations. The likely attack vector is a local, privileged or, in edge cases, remote scenario where quota operations can be manipulated. The vulnerability is not listed in the CISA KEV catalog, indicating no current exploitation evidence. Nonetheless, the potential for service disruption warrants prompt attention.