Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability has been identified in the Linux kernel's F2FS (Flash-Friendly File System) implementation. This issue arises during the unmounting process when a checkpoint error is present. The F2FS filesystem fails to properly manage dirty pages, which can lead to a kernel bug where the filesystem's synchronization node count is incorrectly reported. This vulnerability can cause a deadlock by not allowing all F2FS writeback control data pages to be processed, leaving some pages dirty and unflushed. The problem is exacerbated for directory pages, which are intentionally left dirty to preserve the latest directory structure.
This vulnerability can cause a kernel panic by triggering a generic F2FS bug assertion failure, disrupting normal system operations and potentially leading to data loss.
The vulnerability can be reproduced by mounting an F2FS filesystem, introducing a checkpoint error, and then unmounting the filesystem. The F2FS filesystem will incorrectly handle the dirty pages, especially those related to directory structures, leading to the assertion failure and kernel panic.
Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been addressed. Instructions for downloading the latest kernel version can be found on the official Linux kernel website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.