Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel for RISC-V architecture, where the 'die()' function can be called within an exception handler context that does not allow sleeping. The 'die()' function, however, takes a spinlock that can sleep when PREEMPT_RT is enabled, leading to a warning about sleeping functions being called from an invalid context. This issue was resolved by switching to a raw spinlock, which does not sleep even with PREEMPT_RT enabled.
The vulnerability could lead to a deadlock situation, where the system becomes unresponsive due to improper handling of sleep functions in a critical context.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.