Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel related to the handling of procfs content for BCM operations has been addressed. When procfs data is generated for a BCM operation that is in the process of being removed, the output may contain unreliable information due to a use-after-free condition. This issue arises because the removal process lacks proper read-side synchronization. The vulnerability has been resolved by adding the necessary RCU read lock, ensuring that list entries are correctly managed under RCU protection.
The vulnerability could lead to a use-after-free condition, allowing for the potential execution of arbitrary code or causing a denial-of-service by crashing the system.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.