Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 7.0.0-rc2, < 7.0.0-rc2-g730b257ba723-dirty
A NULL pointer dereference vulnerability has been identified in the Linux kernel's DRM imagination component. This issue leads to a segmentation fault when updating the ftrace mask, causing an invalid data access. The vulnerability arises from incorrect data being passed to a debugfs entry, which can be exploited by writing to the 'trace_mask' file in the debugfs.
Exploitation of this vulnerability causes a kernel panic due to a NULL pointer dereference, which can lead to a denial of service by crashing the system.
The vulnerability can be reproduced by writing to the 'trace_mask' file in the debugfs under the DRM imagination subsystem. This action triggers a NULL pointer dereference, causing a segmentation fault and a kernel panic.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.