In the Linux dm‑era module, a failure in the snapshot creation process causes the kernel to bump the live superblock reference count and allocate a shadow block, but if the subsequent allocation of that shadow block fails, the block is never returned to the metadata space map. The result is a permanent leak of one metadata block, which can accumulate and consume kernel resources over time.

The vulnerability impacts all Linux kernels that include the dm‑era driver, as indicated by the vendor/product listing of Linux:Linux any distribution shipping a kernel with the unpatched dm‑era module is potentially affected until the patch is released and applied.

The CVSS score of 4.4 denotes moderate severity; the EPSS score is < 1%, indicating a very low probability of exploitation in the wild, and the flaw is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker would need local privilege or kernel code execution to repeatedly trigger snapshot failures. Because the leak only occurs on failure, the real‑world likelihood of rapid exploitation is low, though repeated failures could eventually exhaust metadata blocks and degrade kernel availability.