Linux Kernel Out-of-Bounds Relocation Access Vulnerability in RISC-V Module

Vulnerability

A vulnerability allowing out-of-bounds access in the relocation section has been identified in the Linux kernel RISC-V module. The issue arises because the code permits the relocation array to access an element beyond the end of the section. This vulnerability has been addressed by modifying the code to use 'num_relocations', which accurately reflects the size of the relocation section.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, potentially causing memory corruption or allowing for arbitrary code execution.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.