CVE-2023-33203

Katalog CVE

CVSS 6.4 · Medium EPSS 0,35%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, redhat enterprise linux. Skor CVSS 3.1 6.4 (Medium) menurut NVD.

Deskripsi (NVD)

The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.

Rincian

Terbit di NVD

18 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.4 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6b6bc5b8bd2d4ca9e1efa9ae0f98a0b0... mailing list · patch
• https://bugzilla.suse.com/show_bug.cgi?id=1210685 issue tracking · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2192667 not applicable
• https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9 mailing list · release notes