The flaw resides in the f2fs file system of the Linux kernel where, during the conversion of inline dentries, file names are copied before the kernel verifies that their recorded lengths fit within the allocated filename slots. This omission causes a buffer overread that may expose kernel memory contents or destabilize the system by triggering a crash. The weakness manifests as a bounds‑check failure that could, if exploited, compromise confidentiality and availability of kernel data.

All Linux kernel releases that include f2fs support are potentially impacted. No specific kernel version numbers are cited, so any kernel build lacking the recent patch that validates inline dentry name lengths remains vulnerable. System administrators should examine whether their running kernel contains f2fs code and whether it incorporates the proposed validation change.

The CVSS score of 7.1 indicates moderate severity, and EPSS score is not available, so exploitation likelihood has not been quantified. The vulnerability is not listed in the CISA KEV catalog, indicating no documented large‑scale exploitation at this time. Based on the description, it is inferred that a local attacker with control over the creation of a corrupted f2fs image could trigger the conversion routine, enabling the overread. The attack vector therefore requires local access to the kernel’s file system handling code, and the impact could be kernel‑level information disclosure or instability.