Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A potential data corruption issue in the NFS (Network File System) implementation of the Linux kernel has been addressed. The vulnerability arose because subrequests needed to be rejoined with the main request before retransmission. If the main request was not on the commit lists due to synchronous writing by the server, it had to be manually added back to the retransmission list. The fix involved adding a function that replicates the effect of 'nfs_cancel_remove_inode()' for O_DIRECT operations, ensuring proper handling of page groups during retransmissions.
The vulnerability could lead to data corruption by improperly managing the retransmission of NFS requests, particularly with O_DIRECT operations.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The specific commit containing the fix can be downloaded as a tarball.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.