Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40358
HistoryMay 01, 2023 - 9:46 p.m.

Use Of Uninitialized Variable

2023-05-0121:46:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
linux-gke
uninitialized variable
nft_osf_eval
high-privileged code
arbitrary code
vulnerability
memory initialization
kernel security

0.0004 Low

EPSS

Percentile

16.1%

linux-gke is vulnerable to Use of Uninitialized Variable. The vulnerability allows users with the ability to execute high-privileged code to exploit the flaws within ‘nft_osf_eval function’ causing a lack of proper initialization of memory prior to accessing it resulting in the attacker gaining access to execute arbitrary code as the kernel.