Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's cpufreq amd-pstate driver has been addressed by removing an unnecessary driver-wide lock in the set_boost function. This lock was not needed as set_boost is a per-policy function call. The previous implementation posed a risk of deadlock by potentially colliding with another mutex acquisition from the mode-switch path in the status_store function.
The removal of the unnecessary driver lock prevents potential deadlocks that could arise from conflicting mutex acquisitions in different parts of the driver.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.