Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's zram swap handling can lead to user processes being corrupted by unexpectedly receiving zeroed (invalid) data. This issue arises under CLONE_VM cloning, where one CPU may read zeroed data after another CPU has deleted a zram entry, creating a synchronization problem. The vulnerability has been addressed by modifying the swap handling to ensure that correct data is mapped to user space, although this may increase memory consumption.
The vulnerability can cause data corruption in user processes by introducing invalid zeroed data, which can disrupt normal operations and lead to incorrect program behavior.
Users can apply the latest patches available in the Linux kernel repository to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.