The bug causes the XFS filesystem scrub operation to enter a livelock when an unlinked inode list contains a circular reference. This endless loop can stall the scrub process, consuming CPU and memory resources and ultimately preventing the file system from completing maintenance tasks, which results in a denial of service to processes that rely on successful scrubbing. The impact is strictly availability; there is no evidence of privilege escalation or code execution.

All Linux kernel installations that have not applied the patch commit that introduces the cycle‑detection bitmap. The vulnerability applies to any distribution or custom kernel compiled from source that contains the affected XFS scrub code; the CPE string indicates all versions of the Linux kernel.

No CVSS score is supplied, and the EPSS score is not available, so the precise severity and likelihood of exploitation are unclear. The vulnerability is listed as not being in the CISA KEV catalog, suggesting no known active exploitation. The attack vector appears to be a local operation—an online fsck or an automated scrub task—so elevated privileges are likely required to trigger the condition. Because the flaw manifests only when a dangling unlink list forms a loop, the risk to typical end users is limited, but an adversary with local access could intentionally create such a cycle to induce a denial of service.