Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's RTLwifi component involves improper management of private data structures, potentially leading to memory corruption. The issue arises because a global list intended to track private data is not correctly maintained; failed probe operations do not remove the associated data, allowing subsequent probes to access freed memory. Although a locking mechanism exists for the list, it is not utilized, creating a risk of race conditions and data corruption during repeated probe attempts.
Exploitation of this vulnerability could lead to memory corruption by allowing a second probe to access freed memory, potentially causing a use-after-free condition.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.