ocfs2_read_blocks() assumes that a buffer head returned by sb_getblk() is exclusively owned, but this is not always true. When a buffer head is reused with its BH_Uptodate flag still set after a failed validation, the bad data can be inserted into the OCFS2 metadata cache and exposed to upper layers. The result is that corrupted metadata may be accepted by the filesystem, potentially leading to data corruption or a denial of service. This weakness is a form of improper initialization or resource mismanagement that can undermine the integrity of the storage system.

The vulnerability affects all Linux kernels that include OCFS2 support. Any kernel build that has the ocfs2_read_blocks() implementation prior to the supplied patch is susceptible, regardless of distribution or specific kernel version. The issue is tied to the form of Linux kernel, and no specific product version list is provided in the advisory.

The CVSS score is not reported, but the lack of a valid EPSS score and absence from the CISA KEV catalog suggest that while the flaw is exploitable, its current exploitation probability may be moderate. The likely attack vector requires an attacker to influence the data returned to the kernel via OCFS2, which typically implies local or privileged access or control over the underlying block device. An attacker who can cause the kernel to accept stale, corrupted metadata could corrupt filesystem state, compromise data integrity, and cause service disruption, especially for systems relying on OCFS2 for clustered storage.