Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A NULL pointer dereference vulnerability has been identified in the Linux kernel's handling of interconnects for the Qualcomm SM8450 platform. This issue arises from a change to dynamic IDs for SM8450 interconnects, which left two links unconverted. As a result, an invalid pointer to a destination interconnect can lead to a runtime NULL pointer dereference, causing a kernel panic. The vulnerability affects the Linux kernel stable tree.
Exploitation of this vulnerability leads to a kernel panic, causing a fatal exception and halting the system.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is available in the Linux kernel stable tree.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.