Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's event probing system can lead to a NULL pointer dereference crash. This issue arises when an event probe (eprobes) attempts to use a symbol reference, which is not properly handled, causing a crash. Inconsistencies exist between event probes and other probing mechanisms, kprobes and uprobes, which can reference additional data beyond main registers, such as immediate addresses, symbols, and task names. The vulnerability affects event probes by not allowing them to reference the same data as kprobes and uprobes, leading to potential crashes when certain symbols are used.
Exploitation of this vulnerability causes a NULL pointer dereference, leading to a crash of the affected system or application.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.