A corruption in the OCFS2 filesystem can corrupt a journal dinode while the volume is mounting. Instead of returning an error, the kernel executes a BUG_ON, causing a panic when the mount process is torn down. The result is an immediate kernel crash, denying all services that rely on the affected system.

All Linux kernel releases that employ OCFS2 and contain the buggy BUG_ON check are vulnerable. The issue exists in kernels between the introduction of the BUG_ON in commit 10995aa2451a and the subsequent fix that replaces it with WARN_ON. Systems utilizing OCFS2 as a mounted filesystem and exposing potential for corrupted images are at risk.

The vulnerability requires an attacker to provide a malformed OCFS2 image or otherwise trigger the corrupt journal dinode during mount. Because the failure manifests as a kernel panic, the attack achieves complete denial of service for the host. No public exploit is listed in CISA KEV and the EPSS score is currently unavailable, indicating uncertain but non-zero exploitation probability. The absence of a public exploit does not mitigate the severity of the crash; patching remains the only definitive defense.