Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's nilfs2 file system has been addressed, concerning directory manipulation operations. The issue arose because the directory routines nilfs_set_link() and nilfs_delete_entry() assumed that the buffer preparation function nilfs_prepare_chunk() would always succeed. This assumption proved incorrect, as nilfs_prepare_chunk() can fail due to metadata corruption, leading to unhandled errors that triggered legacy BUG_ON() checks. The vulnerability was exacerbated by improved fuzzing test reproducibility, which revealed the error handling gaps. The patch series resolves these issues by adding the necessary error handling in the affected functions, ensuring that rename operations do not inadvertently alter the modification time of directories, and addressing rename-related BUG_ON() check failures reported by syzbot.
The vulnerability could lead to unhandled errors in directory manipulation operations, causing potential metadata corruption or inconsistent file system states.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.