Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's OCFS2 file system has been addressed. The issue arose in the DLM (Distributed Lock Manager) file system when the function 'user_dlm_destroy_lock' failed. It did not properly clean up the flags it had set, leading to a situation where a lock, still in use, could be incorrectly reported as available. This mismanagement allowed the DLM lock to remain linked in the lock resource, causing a use-after-free error when accessed, which triggered a kernel panic. The vulnerability's root cause was the failure to revert certain flags and properly handle error conditions, particularly when locks were still active.
The vulnerability could be exploited to cause a kernel panic, disrupting system operations and potentially leading to a denial of service.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.