Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's handling of DMA addresses for received packets in the wx_rx_buffer structure, specifically within the net libwx component. The issue arises because the 'dma' field, intended for DMA address management, was left uninitialized and could potentially be used incorrectly, leading to undefined behavior such as DMA errors or use-after-free conditions. Although this error has not yet been observed, it has been addressed in the code to prevent future occurrences.
The vulnerability could cause undefined behavior, including DMA errors or use-after-free conditions, if the uninitialized 'dma' field was used.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.