Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of the Intel Ethernet PCI driver has been addressed. The issue arose in the clock management during the removal process of the driver. Initially, a commit removed a necessary 'clk_disable_unprepare()' call, leading to improper clock handling. This omission was partially corrected in a subsequent commit, but the latest updates to the driver removal process created a new inconsistency. The 'clk_disable_unprepare()' call is now needed again in the 'intel_eth_pci_remove()' function to prevent potential issues.
The vulnerability could lead to improper clock management, causing potential instability or unexpected behavior in the system when the Intel Ethernet driver is unloaded.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.