Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's SCSI UFS BSG (Block Storage Generic) implementation. The issue arises because the bsg_queue is not set to NULL after it has been removed, potentially leading to unauthorized access of freed memory. While this vulnerability does not currently cause any problems, the lack of proper nullification after removal could create risks in the future.
Exploitation of this vulnerability could lead to a use-after-free condition, allowing for memory corruption or arbitrary code execution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.