Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's SUNRPC component can lead to a NULL pointer dereference crash when an 'svc_rqst' request is deferred while the SUNRPC tracing subsystem is active. This issue arises because the 'svc_revisit()' function clears the 'xprt' field, removing the remote address needed for the tracepoint, which can cause a crash by dereferencing a NULL value. The vulnerability has been addressed by modifying the trace event to safely handle the remote address, allowing the fix to be backported to stable kernel versions.
Exploitation of this vulnerability causes a crash due to a NULL pointer dereference, disrupting system operations.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.