Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's management of Source Read Copy Update (SRCU) grace periods. The issue arises in the 'cleanup_srcu_struct()' function, which currently checks for ongoing grace periods but fails to account for grace periods that are anticipated to start soon. This oversight could lead to a use-after-free condition, where memory is improperly accessed after being freed.
Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.