Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's RDMA/nldev component allows for an underflow condition in the function nldev_stat_set_counter_dynamic_doit(). The issue arises because the code checks the 'index' variable for an upper bound but fails to validate negative values. This oversight can lead to unintended behavior, as negative indices are not properly handled. The vulnerability has been addressed by changing the index variable's type to unsigned, eliminating the risk of underflow.
Exploitation of this vulnerability could lead to an underflow condition, potentially causing unexpected behavior in the affected component.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.