to inode metadata may simply vanish from the filesystem. If critical metadata is omitted, files or directories can become corrupted, and the system may experience inconsistent state or silent data loss. The flaw is a classic data consistency bug, classified as CWE‑821.

All Linux kernel installations that use the ext2 filesystem are impacted. The patch applies to any kernel that includes the ext2 module any current kernel build that is vulnerable.

The CVSS score of 6.1 indicates a moderate severity. Because the code path is in the kernel, exploitation requires local access and requires the ability to trigger filesystem operations that write to an IS_SYNC inode. The EPSS score is < 1% and the vulnerability is not listed in CISA KEV, implying no widespread exploitation seen yet. Based on the description, the likely attack vector is local with user or privileged context. The risk is that an attacker can exploit this vulnerability to corrupt filesystem metadata, leading to data loss or denial of service for the affected system.