The Linux kernel contains an integer underflow in the XFS filesystem subsystem, specifically within the function that reserves space for metadata btree files. When the available free blocks for a file drop below the amount already used by that file, the code subtracts hidden_space without checking for underflow, potentially reducing the free block counter by a massive amount. This can corrupt the kernel's internal accounting of free inodes and blocks, leading to filesystem instability, crash, or potentially privilege‑escalation exploitation if the attacker can trigger the flaw through crafted XFS operations.

The flaw is present in any Linux kernel that implements the XFS filesystem. The affected products are the Linux operating system and the Linux kernel itself. No specific kernel versions are identified in the CNA data, so all kernel variants that include the XFS metafile_resv_init routine are potentially vulnerable.

The flaw is a classic integer underflow (CWE‑190) and could be leveraged by an attacker who can manipulate XFS metadata or create conditions that cause the hidden_space calculation to underflow. Release notes for the kernel do not indicate a CVSS or EPSS score, and the vulnerability is not yet listed in the CISA KEV catalog, so the exploitation potential is uncertain. However, the bug resides in core kernel code and may allow denial of service or other kernel‑level impact if successfully triggered. The likely attack vector is local or privileged operations that involve XFS metadata manipulation, though remote exploitation would require additional privileges.