Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's epoll implementation. The issue arises because epoll incorrectly decrements the reference count of an epoll instance before releasing the associated mutex. This can lead to a use-after-free condition, as another user may free the epoll instance while the mutex is still being accessed. The vulnerability affects several versions of the Linux kernel.
Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.