Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's nilfs2 file system has been identified, related to improper handling of inode management during directory removal operations. The issue arises when the inode bitmap becomes corrupted, leading to an incorrect reassignment of inode numbers. This corruption causes an inode duplication, triggering a warning during the removal of directories. The vulnerability allows for the exploitation of inode link count management, potentially leading to unintended file system behavior.
Exploitation of this vulnerability could cause inode link count underflows, disrupting normal file system operations and potentially leading to further file system corruption.
To address this vulnerability, it is recommended to check the inode link count in the nilfs_iget() function. If the link count is zero, indicating that the inode has been deleted, the iput function should be executed to reclaim it.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.