Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ctucanfd component can lead to a NULL pointer dereference. This issue arises when the allocation of a socket buffer (skb) fails, leaving the pointer to the struct can_frame as NULL. While this NULL pointer scenario is addressed in most parts of the ctucan_err_interrupt() function, one location was overlooked, creating a potential vulnerability.
Exploitation of this vulnerability can cause a NULL pointer dereference, leading to a crash of the kernel or the affected process.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.