Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ice driver has been addressed, which involved the improper handling of untrusted packet length values in the function 'ice_vc_fdir_parse_raw()'. The issue arose because the raw packet length was not adequately verified before being used, potentially allowing for exploitation. The vulnerability has been resolved by adding a check to ensure that the packet length does not exceed the maximum allowed size for raw packets.
The vulnerability could have led to improper validation of packet lengths, potentially allowing for exploitation through malformed packets.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.