Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A refcount leak vulnerability has been identified in the Linux kernel's xillybus character driver. The issue arises in the xillyusb_probe function, where usb_get_dev is called, but usb_put_dev is not properly invoked before releasing the device, leading to a reference count leak.
The vulnerability causes a refcount leak, which can potentially be exploited to cause a use-after-free condition or memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.