Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Btrfs file system was introduced by inadequate error handling in the get_canonical_dev_path function. The function calls d_path() to retrieve the final device path, but d_path() can return an error. If this error occurs, the subsequent strscpy() call may cause an invalid memory access. The vulnerability has been addressed by restoring the necessary error handling for d_path().
The vulnerability could lead to invalid memory access, potentially causing a denial-of-service condition by crashing the system or creating a vulnerability that could be exploited to execute arbitrary code.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.