CVE-2025-22076

MEDIUM

Linux Kernel 6.12-6.12.22, 6.13-6.13.10, 6.14-6.14.1 - Missing Shutdown Check in exFAT File Operations

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: exfat: fix missing shutdown check xfstests generic/730 test failed because after deleting the device that still had dirty data, the file could still be read without returning an error. The reason is the missing shutdown check in ->read_iter. I also noticed that shutdown checks were missing from ->write_iter, ->splice_read, and ->mmap. This commit adds shutdown checks to all of them.

Scores

CVSS v3 5.5
EPSS 0.0019
EPSS Percentile 8.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (14)
linux/Kernel 6.12.0 - 6.12.23linux
linux/Kernel 6.13.0 - 6.13.11linux
linux/Kernel 6.14.0 - 6.14.2linux
Linux/Linux < 6.12
Linux/Linux 6.12
Linux/Linux 6.12.23 - 6.12.*
Linux/Linux 6.13.11 - 6.13.*
Linux/Linux 6.14.2 - 6.14.*
Linux/Linux 6.15
Linux/Linux f761fcdd289d07e8547fef7ac76c3760fc7803f2 - 47e35366bc6fa3cf189a8305bce63992495f3efa
... and 4 more
Published Apr 16, 2025
Tracked Since Feb 18, 2026