Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A double-free vulnerability has been identified in the Linux kernel's fsl-mc bus implementation. The issue arises in versions of the kernel where the mc_dev variable, which references a field of an allocated mc_bus, is improperly deallocated. This flaw occurs when the MC device is a DPRC, leading to a scenario where the mc_bus is freed, but the mc_dev reference causes a second, erroneous deallocation.
Exploitation of this vulnerability leads to a double-free condition, which can commonly result in memory corruption and potentially allow for arbitrary code execution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.