Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability has been identified in the Linux kernel's khugepaged component, related to a race condition involving the virtual memory area (VMA) and its associated anon_vma. The issue arises when the collapse_and_free_pmd() function attempts to remove page tables without properly locking the anon_vma, allowing for concurrent access and potential use-after-free errors. This vulnerability can trigger a lockdep warning and disrupt normal memory management operations.
Exploitation of this vulnerability can cause a use-after-free condition, leading to memory corruption and potential arbitrary code execution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.