An integer overflow in the exfat module’s up‑case table creation causes the kernel to enter an infinite loop whenever the table size is zero, a situation that can arise from corrupted media or misbehaving devices. The loop consumes CPU resources and blocks the kernel context that accessed the filesystem, freezing any processes or threads interacting with that mount until the kernel is rebooted or the volume is remounted. The failure mode is a complete denial of service on the affected system.

The flaw resides in the Linux kernel’s exfat filesystem driver. Any kernel that ships with the default exfat module is potentially impacted, regardless of version, until the patch that prevents zero‑size table handling is applied.

No CVSS or EPSS data are available, and the vulnerability is not listed in CISA KEV. The attack vector is likely local, requiring access to a device containing a damaged exfat volume or the ability to cause corruption on a mounted volume. Because the infinite loop occurs in kernel space, exploitation can result in a full system denial of service. The lack of quantified metrics suggests uncertainty in exploitation likelihood, but the nature of the flaw implies a serious availability threat.