Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's IPv6 multicast handling has been addressed. The issue arose because the function 'mld_newpack()' could be called without the necessary RCU (Read-Copy-Update) or RTNL (Routing Netlink) protections. This vulnerability is present in the IPv6 IGMP (Internet Group Management Protocol) socket handling, which used allocations that could sleep, creating a potential for race conditions. The vulnerability has been resolved by adding RCU protection to 'mld_newpack()' and adjusting the socket allocation method to ensure proper synchronization.
Exploitation of this vulnerability could lead to race conditions in the IPv6 multicast handling, potentially causing unexpected behavior in network packet processing.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.