Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been addressed in the Linux kernel's IPv4 handling. This issue arose from not properly managing reference counts for network devices in certain IPv4 functions, which could potentially lead to accessing freed memory. The vulnerability was mitigated by changing these functions to use a version of the destination device lookup that is safe for concurrent access, thereby preventing the use-after-free condition.
The vulnerability could lead to a use-after-free condition, allowing for potential memory corruption or exploitation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.