The vulnerability involves the xfs_exchmaps_estimate_overhead() function in the Linux kernel's XFS filesystem. The function adds overhead values (bmbt and rmapbt) to a local reservation blocks variable but performs the UINT_MAX limit check on the original reservation value (req->resblks) before overhead addition. The corrected reservation value is then stored back and passed to xfs_trans_alloc(), which expects an unsigned int block reservation. The fix ensures the limit check is applied to the adjusted reservation value, preventing potential issues from incorrect reservation sizes.

If unpatched, the incorrect reservation limit check could cause the system to accept block reservations exceeding the intended maximum, potentially leading to resource mismanagement or instability in the XFS filesystem transaction allocation. No known exploits are reported in the wild.

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to ensure the reservation limit check is correctly enforced.