Impact
The vulnerability arises from an incorrect unit conversion in the XFS filesystem’s per_binval calculation. The conversion currently treats a filesystem block value as bytes, reversing the intended conversion of bytes to filesystem blocks. This logical error can lead to an inaccurate determination of buffer invalidation ranges, potentially leaving stale data in the cache or invalidating data prematurely, which may affect filesystem consistency and performance. The bug does not provide a direct code execution pathway.
Affected Systems
All Linux kernel installations that include the XFS filesystem are potentially impacted. The flaw is present across kernel versions where the XFS module is compiled in or loaded, irrespective of specific kernel version numbers, as the description does not enumerate a narrowed version set.
Risk and Exploitability
No CVSS or EPSS metrics are available, and the flaw is not listed in the CISA KEV catalog, indicating no publicly documented exploitation. The bug represents a logical flaw rather than a memory corruption or privilege escalation vector. Consequently the risk is considered low to moderate pending patch. The absence of exploitation evidence and the lack of a direct attack path suggest that the vulnerability is unlikely to be leveraged by attackers without additional context.
OpenCVE Enrichment