A flaw in the ext4 file system logic causes the kernel to execute a null pointer dereference when large folios are enabled on an encrypted inode. This occurs if the encryption feature is enabled on a mounted file system after the mount check that should have disabled large folios. The resulting fault crashes the kernel, effectively shutting down the affected system or forcing a reboot. The issue is a classic example of a NULL pointer dereference leading to a denial‑of‑service condition.

The vulnerability affects all Linux kernel releases between version 6.19 and 7.2, inclusive. The affected vendor is Linux, and there is no specified upstream vendor name beyond the Linux kernel itself.

The CVSS score is 7, and the EPSS score is < 1%. The flaw requires the attacker to trigger a write of encrypted data on a mounted file system that has had its encryption feature enabled after an initial mount. This typically implies local or privileged attacker access, but a compromised process with write capability could also provoke the crash. Given the low EPSS but the high CVSS score and the severe impact of a system crash, the current risk is moderate but the potential damage remains significant.