A flaw in the ext4 file system logic causes the kernel to execute a null pointer dereference when large folios are enabled on an encrypted inode. This occurs if the encryption feature is enabled on a mounted file system after the mount check that should have disabled large folios. The resulting fault crashes the kernel, effectively shutting down the affected system or forcing a reboot. The issue is a classic example of a NULL pointer dereference leading to a denial‑of‑service condition.

The vulnerability affects all Linux kernel releases between version 6.19 and 7.2, inclusive. The affected vendor is Linux, and there is no specified upstream vendor name beyond the Linux kernel itself.

The CVSS score is not provided, and the EPSS score is not available, but the vulnerability is not listed in CISA’s KEV catalog, suggesting no publicly known exploitation. The flaw requires the attacker to trigger a write of encrypted data on a mounted file system that has had its encryption feature enabled after an initial mount. This typically implies local or privileged attacker access, but a compromised process with write capability could also provoke the crash. Given the lack of public exploits and the local nature of the trigger, the current risk is moderate but the impact of a system crash is severe.