CVE-2025-22076

A flaw was found in the Linux kernel's exFAT file system driver. The driver fails to verify whether a storage volume has been shut down before executing standard file input/output operations. A local user could exploit this flaw by interacting with an exFAT device during a forced shutdown, resulting in improper driver state and a potential Denial of Service (DoS).

This vulnerability is rated Moderate in impact because exploitation requires local access and interaction with an active exFAT filesystem on a device undergoing forced shutdown, restricting the scope of impact to local denial of service. Due to missing validation of shutdown state across file I/O operations, accessing a terminated exFAT volume leads to inconsistent driver behavior rather than returning appropriate I/O errors. Earlier enterprise releases, including Red Hat Enterprise Linux 8 and 9, lack the vulnerable code paths and are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.