Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's cacheinfo handling for arm64 architecture allows for an out-of-bounds write to the cacheinfo array. The issue arises because the loop responsible for detecting and populating cache information includes a bounds check on the array size but fails to consider cache levels with separate data and instruction caches. This oversight can lead to improper indexing, potentially causing memory corruption.
Exploitation of this vulnerability could lead to memory corruption by allowing writes outside the intended bounds of the cacheinfo array.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.