CVE-2023-3269

Katalog CVE

CVSS 7.8 · High EPSS 1,3%

Kerentanan Use After Free pada linux kernel, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.

Rincian

Terbit di NVD

11 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2215268 issue tracking · patch · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2023/Jul/43 mailing list · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-3269 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6... mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230908-0001/ advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/07/28/1 mailing list
• http://www.openwall.com/lists/oss-security/2023/08/25/1 mailing list
• http://www.openwall.com/lists/oss-security/2023/08/25/4 mailing list
• https://www.openwall.com/lists/oss-security/2023/07/05/1 mailing list