Impact
During driver detach in the Linux kernel, an incorrect iterator causes the same hash algorithm to be unregistered twice, leading to a kernel panic. This flaw permits an attacker to force the kernel to crash, resulting in complete loss of system availability.
Affected Systems
All Linux kernel versions that include the vulnerable inside-secure/eip93 driver code before the commits that fixed the bug are affected. No specific release numbers are listed, but any kernel containing the original unpatched driver implementation is at risk. The vendor is the Linux kernel project.
Risk and Exploitability
Exploitability requires local privileged instructions to unload or reload the kernel module; based on the description, it is inferred that an attacker would need such privileges to trigger the flaw. The EPSS score is less than 1%, indicating a low probability of active exploitation. This vulnerability is not listed in the CISA KEV catalog. With a CVSS score of 5.5 the flaw carries medium severity; the resulting kernel panic causes a denial of service. The flaw corresponds to CWE-911, reflecting improper resource lifecycle management.
OpenCVE Enrichment