Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A deadlock vulnerability has been identified in the Linux kernel's netpoll feature, specifically within the memory allocation process under spinlock. This issue arises in the refill_skbs() function, where holding the skb_pool->lock while allocating memory can lead to a recursive lock acquisition attempt, causing a deadlock. The problem is exacerbated during periods of high memory pressure, when the memory allocation fails and triggers an out-of-memory warning. This warning is processed in a way that attempts to reacquire the same lock, which is already held, leading to a deadlock situation.
Exploitation of this vulnerability causes a deadlock, where the system becomes unresponsive due to a circular locking situation.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.