Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Rxrpc implementation allows a waiting process to be aborted without encountering an EBUSY error. When the sendmsg() function initiates an Rxrpc call, it must wait for a connection to be established before transmitting data. If sendmsg() is interrupted before this connection is assigned, subsequent sendmsg() calls will fail with EBUSY until a connection is made. This vulnerability has been addressed by allowing the sendmsg() call to be aborted without returning an EBUSY error, while ensuring that the call timer does not start before a connection is assigned, to avoid potential errors.
This vulnerability allows for improved process management by enabling the abortion of waiting sendmsg() calls without the usual EBUSY error, preventing potential deadlocks.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.