The flaw stems from an absence of locking around the insertion of unmount events into the XFS health monitor’s event list. Because the insertion occurs without acquiring the monitor’s mutex, concurrent operations can corrupt the list or otherwise disrupt health monitoring. The resulting data corruption can degrade file system integrity and may lead to a system‑wide denial of service if the health monitor’s state becomes inconsistent during ongoing operations.

All Linux kernel releases that include the XFS health monitor and lack the applied fix are affected. The advisory does not enumerate explicit version ranges, so any distribution kernel containing the unpatched code is potentially vulnerable.

The CVSS score is 5.5 and the EPSS score is < 1%. The vulnerability is not listed in CISA KEV. The bug is a race condition involving privileged kernel code; successful exploitation would require local root access or an ability to trigger multiple unmounts simultaneously. While exploitation complexity is high, the impact on data integrity and availability is significant enough that operating systems should treat it as a high‑severity issue.