Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A race condition vulnerability has been identified in the Linux kernel's USB WDM (Wireless Data Modem) subsystem. This issue arises from a timing conflict between the 'wdm_open' and 'wdm_wwan_port_stop' functions. The vulnerability allows for the possibility of opening a character device while its URBs (USB Request Blocks) are still in a corrupted state. The problem occurs because the action of clearing the 'WDM_WWAN_IN_USE' flag is not properly synchronized, leading to potential misuse of the device.
Exploitation of this vulnerability could lead to undefined behavior in the USB WDM subsystem, potentially allowing for the misuse of character devices in a corrupted state.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.