A zeroed field named args->total in the Linux kernel’s XFS parent pointer update logic results in integer wrap‑around when the kernel subtracts block reservations. That overflow bypasses the free‑space check and can force the allocator to clamp to zero, causing a shutdown of the XFS filesystem and ultimately crashing the operating system. This flaw involves integer wrap‑around and signed/unsigned conversion errors (CWE-191).

All Linux kernel releases that contain the unpatched XFS filesystem are potentially affected. The CNA information lists Linux:Linux, and the CPE indicates the Linux kernel broadly. No specific affected versions are provided, so any unpatched kernel using XFS should be treated as vulnerable.

The CVSS score of 5.5 indicates a medium severity vulnerability. The EPSS score of < 1% shows a very low exploitation probability. The flaw is not listed in the CISA KEV catalog. The bug requires triggering XFS parent pointer updates that grow the attribute fork, which is a local operation; thus the likely attack vector involves a local or remote code execution capability to perform such updates. Based on the description, it is inferred that exploitation would lead to a filesystem shutdown, implying significant downtime or service denial, but the exploitation probability is considered low to moderate without additional attack surfaces.