Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's ALSA HDA component manager initialization function. The issue arises because the __component_match_add function can assign the 'matchptr' pointer an error value indicating memory allocation failure. This error value is then dereferenced, leading to a potential crash. The vulnerability has been addressed by adding a check to verify that the pointer does not contain an error before dereferencing it.
The vulnerability can lead to a system crash by causing a null pointer dereference.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux Kernel Archives.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.