Linux Kernel Cachefiles Component Error Handling Vulnerability in Directory Creation

Vulnerability

A vulnerability exists in the Linux kernel's cachefiles component related to improper error handling during directory creation. When the vfs_mkdir() function fails, the error code is not correctly retrieved from the error pointer. This oversight causes the error handling routine to receive a success indication (ret=0), leading to the return of a null pointer instead of a valid error reference. The issue has been addressed by modifying the error handling to properly extract and return the error code when directory creation fails.

Impact

The vulnerability could lead to incorrect error handling, causing functions to receive null pointers instead of appropriate error codes, which could disrupt normal operation and error management processes.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Jul 19, 2026, 6:18 PM
Updated: Jul 19, 2026, 6:18 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
7.7
relevance
9.7
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.