Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's netfs component has been addressed, specifically related to memory management during buffered read operations. The issue arose in the netfs_read_to_pagecache() function, which failed to properly handle errors from the ->prepare_read() method and the netfs_prepare_read_iterator(). When an error occurred, the function needed to decrement the ->nr_outstanding counter, cancel the subrequest, and exit the issuing loop. However, this error handling was only implemented for two of the four relevant cases. The vulnerability has been fixed by consolidating the error handling into a common location, allowing it to be applied consistently across all four cases, rather than using a wrapper around netfs_prepare_read_iterator() as initially suggested.
The vulnerability could lead to improper memory management, potentially causing memory leaks or other memory-related issues.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.