Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's virtio sound component can lead to synchronization warnings caused by uninitialized work structures. This issue arises during the probing process of virtio sound devices, where an error can occur after allocating substream structures but before initializing the corresponding work structures. As a result, the cleanup process attempts to cancel synchronization on these uninitialized work structures, triggering warnings. This vulnerability has been addressed by modifying the probe process to ensure that work structures are initialized before any potential errors require cleanup.
The vulnerability can cause kernel warnings related to work synchronization, indicating a potential issue with how the kernel handles virtio sound device management.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.