CVE-2025-22076
In the Linux kernel, the following vulnerability has been resolved: exfat: fix missing shutdown check xfstests generic/730 test failed because after deleting the device that still had dirty data, the file could still be read without returning an error.
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: exfat: fix missing shutdown check xfstests generic/730 test failed because after deleting the device that still had dirty data, the file could still be read without returning an error. The reason is the missing shutdown check in ->read_iter. I also noticed that shutdown checks were missing from ->write_iter, ->splice_read, and ->mmap. This commit adds shutdown checks to all of them.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/47e35366bc6fa3cf189a8305bce63992495f3efaPatch
- https://git.kernel.org/stable/c/4a9595eb024b8319957c178be3cdeed613ac0795Patch
- https://git.kernel.org/stable/c/539147585ca453db6e3d7a5cf3b9c9690513762dPatch
- https://git.kernel.org/stable/c/e41e33eb795cb9c1ead6ac627d8710546fac6e81Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.