Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's RTLwifi component has been addressed, which involved memory leaks and invalid memory access during the probe error handling. The issue arose because the deinitialization process did not properly reverse the order of operations when a probe failed, leading to orphaned memory. Specifically, if the 'init_sw_vars' function failed, the 'rtl_deinit_core' function should not have been called, as it destroyed the associated workqueue. Additionally, the 'pci_set_drvdata' call was unnecessary and could contribute to memory leaks. The vulnerability affected several versions of the Linux kernel.
The vulnerability could lead to memory leaks and improper management of PCI driver data, potentially causing instability or resource exhaustion.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.