Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's mac80211 component affects the handling of transmission queues for mesh and OCB (Operational Classification of Broadcast) interfaces. The issue arises when using individual transmission queues (iTXQ), as the code incorrectly assumes there is only one virtual interface queue for broadcasting packets, defaulting to the Best Effort (BE) queue. This assumption is violated when non-BE queue markings are allowed, leading to discrepancies between the transmission queue and the socket buffer queue mapping. Such discrepancies can disrupt queue management within the driver and trigger warnings related to AQL (Application Queue Length) underflow, especially in light of recent changes to the AQL handling.
The vulnerability can cause improper queue management in the driver, potentially leading to performance issues or disruptions in packet transmission. Additionally, it can trigger AQL underflow warnings, indicating a mismanagement of application-level queue lengths.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.