Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's driver management system. When the driver_attach function fails, it inadvertently frees the driver_private data while the driver is still registered on the bus. This mismatch creates a use-after-free condition. The vulnerability affects several versions of the Linux kernel, though specific versions are not detailed. The issue arises in the driver attachment process, where improper handling of driver data can lead to memory management errors.
Exploitation of this vulnerability can lead to a use-after-free condition, which may be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.