Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability in the Linux kernel's RDMA/SIW component has been addressed. The issue arose from a poorly managed direct link to net_device, which caused a 'KASAN: slab-use-after-free' exception during the siw_query_port() call. The vulnerability has been resolved by removing the direct link and relying on the net_device management of associated ib_devices, thereby eliminating redundant local management.
Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.