Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's exFAT file system implementation has been addressed. The issue arose because the 'read_iter' function lacked a proper shutdown check, allowing files to be read without error after the associated device was deleted, even if it still contained dirty data. This vulnerability affected several I/O operations, including 'write_iter', 'splice_read', and 'mmap', all of which also missed necessary shutdown checks. The recent commit rectifies this by adding the appropriate shutdown checks to these functions.
The vulnerability could lead to data consistency issues, allowing for the reading of files that should have been inaccessible after the corresponding device was removed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.