Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's networking scheduler component can lead to a crash during network namespace teardown. The issue arises because the function tcf_idrinfo_destroy() incorrectly passes an error pointer (ERR_PTR(-EBUSY)) as a tc_action reference, causing an invalid memory dereference. This vulnerability affects the Linux kernel stable tree.
This vulnerability can cause a kernel crash by leading to an invalid memory dereference, which can disrupt system operations and potentially create opportunities for further exploitation.
Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.