Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's OcteonTX2-PF component has been addressed. The issue arose from using GFP_KERNEL in a context where preemption is disabled, leading to potential sleep operations that are not allowed. This problem triggered a warning when CONFIG_DEBUG_ATOMIC_SLEEP is enabled, indicating that a sleeping function was called from an invalid context. The vulnerability was present in Linux kernel version 6.2.0-rc2-00269-gae9dcb91c606 on Marvell CN106XX boards.
The vulnerability could lead to improper memory allocation, causing sleeping functions to be called in an atomic context, which can disrupt normal scheduling and preemption operations in the kernel.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.