Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's x86/resctrl component can lead to a NULL pointer dereference when creating a new control group on platforms without cache occupancy monitors. The issue arises because the logic added in a previous commit to allocate the cleanest CLOSID by searching for the fewest dirty cache lines depends on values from the llc_occupancy counters. On platforms lacking these counters, the array needed for this operation is not properly allocated, causing the NULL pointer dereference.
Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the system.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.