Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's block BFQ (Budget Fair Queueing) I/O scheduler. The issue arises in the function 'bic_set_bfqq()', where the 'bfqq' pointer can be accessed after it has been freed, leading to potential memory corruption. This vulnerability affects several versions of the Linux kernel.
Exploitation of this vulnerability can lead to memory corruption, potentially allowing for arbitrary code execution or causing a denial-of-service condition by crashing the system.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.