Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Intel Ice Ethernet driver can lead to a NULL pointer dereference. This issue arises in the 'ice_eswitch_port_start_xmit' function, where transmission may occur before the switchdev configuration is fully completed, potentially causing a crash. The vulnerability affects the Linux kernel stable tree.
The vulnerability can cause a NULL pointer dereference, leading to a system crash.
The vulnerability can be reproduced by calling the 'ice_eswitch_port_start_xmit' function in the Intel Ice driver before the switchdev configuration is fully completed. This can be done by initiating a transmission while the necessary resources are still being allocated, which will result in a NULL pointer dereference and a system crash.
The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version of the stable Linux kernel to apply the fix.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.