Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's SCSI libfc component. The issue arises in the function fc_exch_abts_resp(), where the exchange's reference count is decreased before the exchange is released. Once the reference count reaches zero, the exchange is freed, but the code subsequently continues to use the now-freed exchange, leading to a use-after-free condition.
Exploitation of this vulnerability could lead to memory corruption issues, allowing for potential arbitrary code execution or other memory-related attacks.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.