Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability allowing a potential NULL pointer dereference has been identified in the Linux kernel's iwlwifi wireless driver. This issue arises in the Media Engine Interface (MEI) component when the driver attempts to clone a socket buffer (SKB). If the cloning process fails, the driver previously tried to use the invalid buffer, which could lead to a crash. The vulnerability has been addressed by modifying the driver to properly handle the failure case and avoid dereferencing a NULL pointer.
Exploitation of this vulnerability could lead to a system crash due to a NULL pointer dereference, causing a denial of service.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.