Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Completely Fair Scheduler (CFS) has been addressed, which could lead to memory corruption. The issue arose because the 'prev' pointer, when converted to a CFS runqueue (cfs_rq), could reference invalid data, potentially causing a memory fault or allowing access to garbage data. This vulnerability was linked to the management of leaf CFS runqueues, where improper pointer handling could disrupt memory integrity. The flaw was particularly concerning because it could result in unpredictable behavior under certain conditions, even if it did not immediately cause a crash.
Exploitation of this vulnerability could lead to memory corruption, causing either a memory fault or access to invalid data, with the potential for unpredictable system behavior.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.