The vulnerability is a 32‑bit integer wraparound flaw in the Linux kernel's MD RAID5 subsystem (CWE‑190). The kernel uses a 32‑bit sequence number (bm_seq) to track stripe batches; when the counter wraps, a newer batch can numerically appear smaller than an older one. Because the original comparison is not wrap‑safe, the kernel may select the wrong batch during metadata updates, potentially corrupting data or losing information in the RAID5 array.

All Linux kernel builds that lack the commits 00e93faf, 2fdc512, 628b14d, 647c728, c5c89e1, cc8eb17, and ffdd3ae are affected. Distribution releases with an unpatched kernel, including many mainstream distributions, are therefore impacted. A kernel version check against the commit history is required.

The CVSS v3 score of 4.7 indicates moderate severity. The EPSS score of < 1 % shows a very low probability of exploitation. The flaw is not in CISA KEV. Based on the vulnerability description, it is inferred that an attacker would need local or privileged access to write to a RAID5 device to trigger the wraparound condition. Such a local privilege escalation or high‑privilege user could cause data corruption. The overall risk is moderate, with exploitation unlikely to be widespread.