Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's J1939 protocol handling has been addressed. The issue arose because the J1939 protocol lacked a NETDEV_UNREGISTER notification handler to reverse changes made by the j1939_sk_bind() function. This omission led to a situation where the usage count of a network device could not be properly decremented, causing unregister_netdevice() to hang. The vulnerability was resolved by implementing a NETDEV_UNREGISTER handler that correctly manages the reference counts, allowing the network device to be unregistered without issues.
The vulnerability could cause the unregister_netdevice() function to hang, waiting for a network device to become free, which could disrupt normal network operations.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.