The vulnerability is a flaw in the XFS file system’s recovery logic for unlinked inode buckets. The code fails to clear a reference after it is released, which can create a use‑after‑free condition when the inode garbage‑collector flush operation fails. Other defects introduce memory leaks and self‑referencing pointers that can form loops in the unlinked list. An attacker able to trigger the garbage‑collection flush path could corrupt kernel memory, potentially leading to arbitrary code execution or a kernel panic. The weakness is a classic Use After Free (CWE‑416).

All Linux kernel versions that include the XFS file system and compile the xlog_recover_iunlink_bucket routine are impacted. No precise version range is supplied; the issue is identified by the generic Linux kernel product label. Distributions shipping a kernel that uses the unpatched XFS code are potentially affected.

No CVSS or EPSS score is publicly available, and the flaw is not listed in CISA’s KEV catalog. The exploitation is inferred to require triggering a failure in the inode‑gc flush path, implying a somewhat constrained attack vector that may be local; yet the impact could be severe if achieved. Until a formal severity metric is assigned, the vulnerability should be treated as high potential risk for local privilege escalation to root or for causing a denial‑of‑service via a kernel panic.