Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 6.12, < 6.12.1
A vulnerability in the Linux kernel's Btrfs file system has been addressed. The issue arose after a previous commit that simplified return variable handling in the function 'lookup_extent_data_ref'. This change inadvertently caused the function to return misleading success indicators, which could lead to operations on incorrect data and potential corruption of the extent tree. The vulnerability affects several versions of the Linux kernel.
The vulnerability could cause operations to be performed on the wrong extent tree items, leading to corruption of the extent tree.
The vulnerability can be reproduced by using a version of the Linux kernel that includes the problematic commit. The 'lookup_extent_data_ref' function will incorrectly indicate a successful lookup when it has not, allowing operations to be performed on the wrong data.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.