The vulnerability in the Linux kernel's nilfs2 filesystem was identified by KASAN detecting a slab-out-of-bounds error in the nilfs_direct_propagate() function after file truncation. The root cause was that after truncation, an intermediate B-tree node block below the root was not deleted but remained in the node cache in a dirty state. The log writer then incorrectly invoked nilfs_direct_propagate() on this block, which is only meant for data blocks in direct mapping, leading to out-of-bounds memory access. The fix adds a nilfs_btree_discard() operation to delete the residual intermediate node block during the conversion from B-tree mapping to direct mapping, with a new 'deform' flag to signal this cleanup operation.

The vulnerability causes a slab-out-of-bounds memory access in kernel memory management, which can lead to kernel instability or crashes. No information about exploitation in the wild or privilege escalation is provided. The impact is primarily a stability and memory safety issue within the nilfs2 filesystem code.

A fix has been implemented in the Linux kernel source code to address this issue by properly deleting the orphaned intermediate node block during mapping transformation. Users should update to the fixed kernel version once it is released. No other mitigation steps are indicated.