Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ext4 file system has been addressed, which involved a directory entry's rec_len field not being a multiple of four. This issue could be triggered by a corrupted filesystem image, leading to a kernel bug when the invalid length was processed. The vulnerability arose because the ext4 file system did not properly validate directory entries before use, allowing for the possibility of filesystem corruption to cause a critical error in the kernel.
Exploitation of this vulnerability could lead to a kernel panic, causing a denial of service by crashing the system.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.