Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A null pointer dereference vulnerability has been identified in the Linux kernel's Distributed Lock Manager (DLM) component. This issue arises because the lock key's resource is not assigned when the request_lock() function is called, leading to a potential dereference of a null value. Although this situation is unlikely to occur under normal DLM operations without debug logging, the vulnerability could be exploited if a newly created lock key does not have an assigned resource. Additionally, the resource name could contain non-printable byte arrays, making it unsafe to assume it is ASCII-coded.
Exploitation of this vulnerability could lead to a null pointer dereference, causing a crash or instability in the system.
Users should apply the latest patches available in the Linux kernel to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.