Linux kernel
cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*
A null pointer dereference vulnerability has been identified in the Linux kernel's RDMA/rxe component. This issue arises in the 'rxe_qp_do_cleanup' function, which is called by 'rxe_put' after the 'rxe_create_qp' function initializes a queue pair (QP). If an error occurs during initialization, the QP's send and receive completion queues are set to NULL. The cleanup function then accesses these queues without checking for NULL values first, leading to a dereference of a null pointer and a potential crash. This vulnerability affects several versions of the Linux kernel.
Exploitation of this vulnerability leads to a null pointer dereference, causing a kernel crash.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.