In the Linux kernel’s erofs filesystem, a bug in buffer resizing causes an oversized copy into a temporary pointer array that is smaller than the number of existing pointers. The copy operation writes past the allocated array boundary, corrupting kernel memory. No known exploitation demonstrating code execution or higher impact has been reported, and the exact system disruption resulting from this corruption is not documented in the CVE description.

All Linux kernel installations that include the erofs filesystem and have not applied the upstream patch are affected. The CVE data does not specify kernel versions, so any system running an older kernel that mounts erofs may be vulnerable.

The CVSS score of 6.0 indicates moderate severity, and the EPSS score of <1% suggests a very low probability of exploitation. The vulnerability is not listed in CISA KEV. Based on the description, a local attacker would need the ability to provoke filesystem resizing operations. If the out‑of‑bounds copy occurs, kernel memory could be corrupted, potentially causing instability or crashes, though no specific impact has been formally documented.