Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Rxrpc implementation has been addressed. The issue involved improper handling of received connection aborts. While the abort was recognized at the connection level, it was not effectively propagated to the associated calls, causing them to hang indefinitely. The fix ensures that calls are properly awakened to process their termination after a connection abort, and also introduces additional tracing for logging these connection aborts.
The vulnerability could lead to a denial-of-service condition, where calls hang indefinitely due to unprocessed connection aborts.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.