Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ksmbd component was addressed, related to the improper handling of list entries in the opinfo_get_list() function. The original implementation used the list_first_entry() macro, which could return an invalid pointer if the list was empty. The vulnerability has been resolved by replacing it with list_first_entry_or_null(), which correctly checks for an empty list.
The vulnerability could lead to dereferencing an invalid pointer, potentially causing a kernel crash or other undefined behavior.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.