Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's octeontx2-pf driver related to improper checking of the Submission Queue Entry (SQE) threshold has been addressed. The original method of verifying the available SQE count relied on the hardware-updated Submission Queue Buffer (SQB) count. This could lead to the driver submitting an SQE before the Completion Queue Entry (CQE) for the previously transmitted SQE at the same index was processed, causing a loss of Socket Buffer (SKB) pointers and resulting in a memory leak. The issue has been fixed by implementing a check on the consumer index, which is updated once the CQE is processed.
The vulnerability could lead to a memory leak by causing the loss of SKB pointers.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.