The vulnerability is a stack‑based buffer overflow that occurs when dm_integrity_check computes a block checksum in inline mode. If the tag size set in the configuration is larger than the maximum digest size supported by the kernel, the padding routine overruns a fixed‑size buffer, causing a kernel panic. The overflow is only triggerable by a user with root privileges and does not grant additional privileges but can terminate the system. The primary impact is a denial‑of‑service that can be exercised locally by root users or administrators.

All Linux kernel builds that include the dm‑integrity module are affected. The CVE does not specify a particular kernel version, but any build that uses the flawed inline checksum logic before the recent buffer‑size fix is vulnerable.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is a local, privileged root user. The exploit is straightforward once the root machine can set a large tag size, but it requires elevated privileges and is unlikely to be used for remote or unauthenticated attacks. Consequently, the risk is a potential high‑impact denial of service in environments where privileged users can modify the dm‑integrity configuration.