The vulnerability exists in the XFS module of the Linux kernel where `xfs_rtginode_ensure()` wrongly treats any error returned by `xfs_rtginode_load()` other than -ENOENT as a success. This allows an inode that should not be used to remain unset or corrupted after an I/O, allocation, or file system corruption event, which can then be accessed by the kernel. The faulty state can cause kernel instability or a crash, resulting in a denial of service. The flaw is linked to the CWE categories for improper validation of error codes and improper handling of error conditions.

Any Linux installation running a kernel that contains the XFS file system driver is potentially affected. The issue is present in all kernel releases that have not applied the patch; it is not limited to a specific version range. Distributions shipping a vanilla or custom XFS‑enabled kernel should consider all kernels as at risk until the fix is deployed.

The CVSS score is 7.1, indicating high severity and a moderate level of exploitation difficulty. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited or no known public exploitation. The attack vector is likely local or remote induced I/O errors or corruption on an XFS volume to trigger the erroneous error handling, leading to a kernel crash. No evidence of remote code execution has been documented; the impact is primarily a denial of service through system instability.