Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A null pointer dereference vulnerability has been identified in the Linux kernel's RTSN Ethernet driver. This issue arises in the 'rtsn_probe' function, where the return value of 'rcar_gen4_ptp_alloc' was not properly checked, potentially leading to a null pointer dereference. The vulnerability affects the stable versions of the Linux kernel.
Exploitation of this vulnerability leads to a null pointer dereference, causing a kernel crash.
The vulnerability can be reproduced by loading the RTSN Ethernet driver without the proper return value check in the 'rtsn_probe' function. This can be done by using a modified version of the driver that omits the null check, allowing a null pointer to be dereferenced.
Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been addressed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.