Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Btrfs file system has been addressed. The issue arose when the 'insert_state()' function failed, returning an error pointer. This error was then passed to 'extent_io_tree_panic()', triggering a BUG() call. In scenarios where 'CONFIG_BUG' is disabled, this could lead to an invalid memory access by dereferencing the error pointer. The vulnerability has been resolved by modifying the code to skip the problematic state insertion and directly handle the error, preventing the invalid memory access.
Exploitation of this vulnerability could lead to invalid memory access, potentially causing a memory corruption issue.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.