CVE-2023-3439

Katalog CVE

CVSS 4.7 · Medium EPSS 0,33%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

Rincian

Terbit di NVD

28 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2023/07/02/1 mailing list · patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2217915 issue tracking · patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/b561275d633bcd8e0e8055ab86f1a13df75a0269 patch