An out‑of‑bounds write occurs in the kernel's ocfs2_remove_refcount_extent function when a refcounted file’s leaf block is removed. The bug triggers a fortify panic and a kernel crash, which could allow a local attacker to cause a denial of service or potentially execute code if the overflow is exploited to control kernel data structures.

The vulnerability affects the Linux kernel’s OCFS2 (Open Cluster File System) implementation. No specific kernel release numbers are given in the data, so any kernel version including OCFS2 that has not applied the reported patch may be affected.

The exploit requires local access to the system and the ability to alter OCFS2 refcounted files. No EPSS score or CVSS value is provided, and the flaw is not listed in the CISA KEV catalog, suggesting limited existing exploitation reports. However, the nature of a kernel crash means that any successful exploitation would result in a system reboot or the need for a reboot, representing a high impact if an attacker can trigger the condition.