Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's cachefiles component related to improper error handling during directory creation. When the vfs_mkdir() function fails, the error code is not correctly retrieved from the error pointer. This oversight causes the error handling routine to receive a success indication (ret=0), leading to the return of a null pointer instead of a valid error reference. The issue has been addressed by modifying the error handling to properly extract and return the error code when directory creation fails.
The vulnerability could lead to incorrect error handling, causing functions to receive null pointers instead of appropriate error codes, which could disrupt normal operation and error management processes.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.