The defect lies in the erofs support of the Linux kernel. When the kernel sets up page cache sharing, it builds a backing file structure with a NULL f_path field. A recent change in the mincore implementation accesses f_path.mnt, leading to a NULL pointer dereference and an OOPS. The crash brings the entire operating system down; there is no known opportunity for arbitrary code execution. The weakness is a classic NULL pointer dereference.

Any installation of the Linux kernel that contains erofs support and has not yet incorporated the f_path validation fix is affected. The advisory does not list specific kernel releases, but the referenced commits indicate the problem existed before the patch. Administrators should verify whether their distribution’s kernel version includes the erofs fix and treat all older kernels as vulnerable.

The CVSS score is not supplied. The EPSS score is unavailable, meaning the statistical likelihood of exploitation is undefined. The vulnerability has not been listed in CISA’s KEV catalog, suggesting no known public exploits. The attack likely requires local or privileged access to invoke mincore on an erofs‑backed file, and no elevated privileges are indicated. The resulting kernel crash is a powerful denial‑of‑service that can bring a system down.