Linux kernel
cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's FUSE filesystem has been addressed, which was causing a runtime warning related to the management of DAX entries. This warning emerged because the filesystem had not properly removed all DAX entries before a warning was issued. The issue was resolved in the XFS and EXT4 filesystems by ensuring all pages were idle prior to unmounting. However, the FUSE filesystem initially missed this fix, leading to a warning about an exception in the truncation process.
The vulnerability caused a runtime warning, indicating a potential issue with how the filesystem managed DAX entries, which could lead to improper handling of file data.
The vulnerability can be reproduced by using the FUSE filesystem in a Linux kernel environment where DAX (Direct Access) is enabled. When a file system operation is performed that requires truncating folios, the missing fix can lead to a warning being generated. This warning indicates that not all DAX entries have been properly managed, creating a potential inconsistency in how file data is handled.
Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commits that resolve this issue can be found in the Linux kernel Git repository.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.