Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's taprio scheduling feature. The issue arises in the taprio_dev_notifier function, which is not safeguarded by an RCU read-side critical section. This lack of protection can create a race condition with the advance_sched function, leading to memory management errors. The vulnerability has been addressed by adding an RCU read lock in the taprio_dev_notifier function, ensuring proper synchronization and preventing the use-after-free condition.
Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.