The Linux kernel contains a flaw in the XFS filesystem code where a memory allocation failure during online repair can cause previously allocated btree blocks to leak. Because the repair logic cannot roll back while also reporting an error, the only options are to discard all changes or let the filesystem fail, effectively bringing the filesystem to a non‑operational state. This results in a denial of service to any processes that rely on the affected filesystem and can lead to data loss if the repair corrupts metadata.

All Linux kernel releases that ship with the XFS filesystem are potentially affected, as the code fragment is part of the core kernel source. No specific vendor or product line beyond the generic Linux kernel is listed, and the issue appears in the kernel tree prior to any patched release.

Based on the description, it is inferred that an attacker would need to induce a memory allocation failure while an online repair is in progress. The CVE does not specify a particular attack vector; the failure could arise from sustained memory pressure or a local privilege level that allows manipulation of repair processes. No remote exploitation vector is disclosed. The EPSS score is not available and the vulnerability is not listed in CISA KEV, suggesting it has not yet been widely exploited. However, the severity of a filesystem crash means the risk is moderate to high for systems that perform frequent online repairs or operate under constrained memory conditions.