Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's RISC-V architecture has been identified, where the stack layout for ftrace return handling does not align with the expected format. This mismatch can lead to a 'Bad frame pointer' warning, indicating potential issues with function return handling. The vulnerability was reported during the Linux Test Project's ftrace stress test, where the improper stack alignment caused kernel warnings about expected versus received frame pointer values.
Exploitation of this vulnerability leads to kernel warnings about incorrect frame pointer values, which can indicate deeper issues with function return handling in the kernel.
The vulnerability can be reproduced by navigating to the tracing directory in the kernel debug filesystem, creating a dynamic event that probes the 'do_nanosleep' function, enabling the event, turning on tracing, and then sleeping for a short duration. This sequence triggers a kernel warning about a bad frame pointer, highlighting the stack layout issue.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.