Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's clock management component has been addressed. The issue was related to an improper NULL versus error pointer check in the PXA1908 APBCP driver. The devm_kzalloc() function, which allocates memory, can return NULL to indicate an error, but the original check did not account for this correctly. The vulnerability has been resolved by updating the error handling to properly reflect the function's behavior.
The vulnerability could lead to a NULL pointer dereference, potentially causing a denial-of-service condition by crashing the system or causing the kernel to become unresponsive.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.