Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A race condition vulnerability has been identified in the Linux kernel's NFS (Network File System) implementation, specifically within the local I/O operations. The issue arises in the function nfs_local_open_fh(), where the handling of file structures can be improperly synchronized. After releasing a lock on the UUID, another CPU may prematurely free a file structure that was recently added, leading to potential data corruption or unexpected behavior. This vulnerability has been addressed by modifying the lock management to prevent such race conditions.
Exploitation of this vulnerability could lead to a race condition, allowing for improper synchronization of file operations, which could cause data corruption or unexpected behavior in NFS file handling.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.