Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's memory management can cause a system crash. This issue arises in the x86 architecture when the physical memory start is set to 0x100000. If there is less than 4 MiB of contiguous free memory available, the kernel fails to allocate memory properly. The function 'memblock_phys_alloc_range()' returns 0 on failure, which leads to 'memblock_phys_free()' incorrectly releasing the first 4 MiB of physical memory. This flaw can cause the kernel to crash, as the memory is effectively lost. The kernel should handle this situation more gracefully, providing a meaningful error message instead of allowing the system to crash.
The vulnerability can lead to a kernel crash, causing a denial of service by making the system unresponsive or unavailable.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.