Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's clock management component has been addressed. The issue was related to an improper NULL versus error pointer check in the MMP PXA1908 MPU driver. The devm_kzalloc() function correctly returns NULL on error, but the original check did not align with this behavior. The vulnerability has been resolved by updating the error handling to match the expected return values.
The vulnerability could lead to a NULL pointer dereference, potentially causing a denial-of-service condition by crashing the system or causing the kernel to become unresponsive.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.