Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A null pointer dereference vulnerability has been introduced in the Linux kernel's /proc/pid/smaps_rollup feature. This issue arises when there are no virtual memory areas (VMAs) associated with a task, leading to a null dereference in the show_smaps_rollup function. The vulnerability was introduced by a commit that converted the smaps_rollup handling to a single value sequence file, and it has been fixed in a subsequent commit.
Exploitation of this vulnerability leads to a null pointer dereference, which can cause a kernel crash or potentially be exploited for arbitrary code execution in the kernel context.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.