Linux Kernel Directory Offset Vulnerability in 32-Bit Systems

Vulnerability

A vulnerability in the Linux kernel's directory offset allocation mechanism can lead to persistent loss of directory entries on 32-bit systems. The issue arises when the offset allocator wraps around to a low value, causing existing directory entries to become invisible during readdir operations. This problem was introduced by a commit that incorrectly treated directory offsets as monotonically increasing integers, rather than opaque cookies, leading to a permanent disappearance of certain entries from readdir output.

Impact

The vulnerability causes directory entries to vanish persistently from readdir output on 32-bit systems, creating a loss of visibility for those entries during directory read operations.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
3.5
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.