The Linux kernel netfs subsystem had a vulnerability where netfs_release_folio() incorrectly updated the zero point based on the local file size (i_size) rather than the remote server's file size (remote_i_size). This discrepancy occurs when there is uncommitted data in the pagecache beyond the folio being released, and the server's end-of-file (EOF) is within that folio (i_size > remote_i_size). The zero point should be limited to remote_i_size to correctly reflect the server's EOF, as i_size reflects local cache updates not yet written to the server. Incorrect zero point updates can cause read-gaps and short reads, potentially impacting file availability. The issue was discovered using the fsx test suite on CIFS with default cache options and has been fixed in the Linux kernel netfs code. No known exploits are reported in the wild.

This vulnerability affects the availability of file data in the netfs filesystem by causing incorrect zero point updates, which can lead to read errors or short reads when accessing files with uncommitted local changes beyond the server's EOF. There is no impact on confidentiality or integrity. The CVSS score of 5.5 reflects a medium severity with local attack vector, low complexity, and requiring privileges. No known active exploitation has been reported.

A fix for this vulnerability has been implemented in the Linux kernel netfs subsystem. Users and administrators should apply the official Linux kernel updates that include this fix. Since this is a kernel-level issue, upgrading to a patched kernel version is the recommended remediation. Patch status is not explicitly stated in the provided data; therefore, check the official Linux kernel advisories or distribution security updates for the exact fixed versions and apply them accordingly.