CVE-2025-22076: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel's exFAT filesystem implementation was discovered and assigned CVE-2025-22076. The issue was identified when the xfstests generic/730 test failed, revealing that after deleting a device with dirty data, files could still be read without returning an error. This vulnerability was disclosed on April 16, 2025 (NVD).

The vulnerability stems from missing shutdown checks in multiple filesystem operations including ->readiter, ->writeiter, ->splice_read, and ->mmap functions in the exFAT implementation. This oversight allowed continued file access operations even after device deletion (NVD).

When exploited, this vulnerability could lead to potential data integrity issues as the system fails to properly handle device shutdown states, potentially exposing sensitive information that should have been inaccessible after device deletion (NVD).

The vulnerability has been addressed in the Linux kernel through patches that implement proper shutdown checks across all affected filesystem operations. The fix has been included in kernel version 6.12.24-1 (Debian List).