Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's MDIO (Management Data Input/Output) subsystem has been addressed. The issue arose because the function 'mdio_bus_init' was incorrectly marked for export and initialization. This combination is problematic, as the initialization section of the code is cleared after use, leaving modules unable to access these symbols. Attempting to use a symbol from a freed section can cause a kernel panic. The problem was detected in 'linux-next' builds after the 'modpost' tool was fixed to issue warnings about this type of error, which had gone unaddressed for a decade.
Accessing a freed symbol from the initialization section can lead to a kernel panic, causing a system crash.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.