Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A data race vulnerability has been identified in the Linux kernel's virtio_ring implementation. This issue arises when the event_triggered variable is accessed concurrently by different tasks, leading to inconsistent states. The race condition occurs because virtqueue_enable_cb_delayed() can prematurely set event_triggered to false, while virtqueue_disable_cb_split/packed() reads it as false, causing a temporary disruption in interrupt notifications for the driver. The vulnerability affects several versions of the Linux kernel.
The data race can cause unreliable behavior in the virtio_net driver by disrupting the timing of interrupt notifications, potentially leading to missed or delayed interrupts.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.