Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's s390/ism component has been addressed by adding a proper release function for device structures. Previously, the code would immediately free the device after adding it, without allowing other parts of the kernel to release their references first. This could lead to use-after-free issues, especially if a reference was still held by sysfs, creating potential stability problems.
The vulnerability could cause use-after-free issues, leading to memory corruption and potential exploitation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.