Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel within the Davicom DM9000 network driver. This issue arises because the driver's private data, referred to as 'dm', is accessed after the associated network device has been freed. Such access can lead to a use-after-free bug. The vulnerability has been addressed by modifying the driver's removal process to ensure that the network device is not freed until all necessary operations are complete. This issue was detected through static analysis.
Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for memory corruption or arbitrary code execution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.