Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A double free vulnerability has been identified in the Linux kernel's CIFS client, specifically within the handling of TCP server information. This issue arises when the server is shutting down while the CIFS thread is still reconnecting to multiple DFS targets. As a result, the server's hostname cannot be properly freed, leading to a memory management error. The vulnerability has been addressed in the official Linux Git repository.
Exploitation of this vulnerability can lead to a double free memory error, which may cause memory corruption and potentially allow for arbitrary code execution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.