Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's nilfs2 filesystem has been addressed. The issue arose when nilfs2 detected metadata corruption, leading to a degradation to read-only mode. Despite this, log writes were still performed, causing a warning to be issued. The vulnerability occurred because the system attempted to write dirty data to a read-only filesystem, which is not permissible. The issue has been resolved by modifying the behavior of certain functions to respect the read-only status and prevent unnecessary write retries during unmount processing.
The vulnerability could cause the system to issue warnings about buffer heads that are not up-to-date, due to improper handling of dirty data after the filesystem had degraded to read-only.
The vulnerability can be reproduced by using the nilfs2 filesystem and inducing metadata corruption, which triggers a transition to read-only mode. During this read-only phase, normal unmount processing can still attempt to write log data, leading to the warning about buffer heads being out of sync.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.