Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Advanced Linux Sound Architecture (ALSA) Jack subsystem can lead to a NULL pointer dereference. This issue arises in the ASoC (ALSA System on Chip) context, where the input device may be unregistered while the 'snd_jack_report' function is called. The vulnerability can be exploited by accessing the input device without proper synchronization, causing a NULL pointer dereference.
Exploitation of this vulnerability leads to a NULL pointer dereference, causing a kernel crash.
The vulnerability has been addressed by serializing access to the input device with a mutex lock.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.