Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's RDMA subsystem, specifically during the device registration process. This issue arises in versions of the Linux kernel that include the problematic RDMA device handling. The vulnerability is caused by a lack of proper lock synchronization when renaming RDMA devices, leading to a race condition. As a result, the device name can be accessed without appropriate protection, creating a window for memory corruption.
Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary memory access or manipulation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.