Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's SP804 timer driver for ARM32 platforms has been addressed. The issue arose because the delay timer shared the same clock event instance with the scheduler clock. On certain platforms, the scheduler clock event was not properly initialized, leading to a kernel Oops error when the current timer was read. This vulnerability affected Linux kernel versions prior to the fix.
The vulnerability could lead to a kernel Oops, causing a crash by accessing an uninitialized scheduler clock event value.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The specific commit that resolves the issue is available in the Linux kernel stable tree.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.