Linux Kernel Netfs Double Reference Count Vulnerability

Vulnerability

A vulnerability in the Linux kernel's netfs component could lead to a double reference count issue. When a netfs request completes during the pause loop, it removes the reference associated with the IN_PROGRESS flag. If the request then enters the final wait loop, it incorrectly adds the reference again, assuming the IN_PROGRESS flag was cleared during the cleanup process. This flaw can disrupt the proper management of request lifecycles.

Impact

Exploitation of this vulnerability could cause improper reference counting, potentially leading to memory management issues such as use-after-free vulnerabilities.

Remediation

Users can apply the latest patches available in the Linux kernel's official repository to address this vulnerability.

Added: Jul 25, 2025, 5:22 PM
Updated: Jul 25, 2025, 5:22 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.5
remediation
0.0
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.