This vulnerability exists in the XFS filesystem component of the Linux kernel. The routine xfs_attr3_leaf_verify_entry first reads the namelen and valuelen fields of an attribute entry before confirming the pointer is within the buffer limits. By crafting a nameidx that points close to the end of the buffer, an attacker can cause the kernel to read memory beyond the allocated region, exposing kernel data through out‑of‑bounds reads. The flaw does not immediately trigger a crash but can leak sensitive information that may aid further attacks.

Affected systems are any Linux distributions using a kernel that has not yet incorporated the bounds check patch. The vulnerability targets the Linux kernel's XFS filesystem subsystem, specifically the xfs_attr3_leaf_verify_entry function. No specific kernel version range is listed in the CNA data, so all unpatched kernels are potentially vulnerable.

The CVSS score is not provided, and EPSS is unavailable, so the exact risk rating is unknown. Because the flaw is triggered by manipulating an XFS metadata structure, the attack vector is likely local or requires an attacker to have write access to a mounted XFS filesystem. Although the kernel later performs the end‑of‑buffer check, the premature read can reveal kernel memory contents, potentially aiding information‑disclosure or exploitation of other kernel bugs. The absence of a CISA KEV listing indicates that no widespread known exploits have been documented yet.