Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A list corruption vulnerability has been identified in the Linux kernel's RDMA/rtrs component. This issue arises from a missing deinitialization call when registering an event handler, leading to a warning about list_add corruption. The vulnerability was introduced by a commit that added an event handler registration without properly unregistering it, causing a mismatch in the list management. This corruption can be exploited by repeatedly connecting and disconnecting, triggering a warning that indicates the list integrity has been compromised.
Exploitation of this vulnerability leads to list management corruption, which can cause undefined behavior in the kernel, potentially allowing for memory manipulation or other malicious actions.
Users can apply the latest patches from the official Linux kernel repository to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.