Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) client modeset handling can lead to a NULL pointer dereference. This issue arises in the 'drm_client_modeset_probe' function, where the 'modes' variable may fail to allocate memory properly. If this allocation error occurs, the function attempts to call 'modes_destroy' on it, which dereferences the NULL pointer. This flaw can result in a crash or undefined behavior, making it a critical issue to address.
Exploitation of this vulnerability can cause a system crash or lead to undefined behavior due to the NULL pointer dereference.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. Instructions for downloading the updated kernel can be found on the official Linux kernel website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.