CVE-2023-40283

Katalog CVE

CVSS 7.8 · High EPSS 0,55%

Kerentanan Use After Free pada linux kernel, debian linux +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

Rincian

Terbit di NVD

14 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e... patch
• https://github.com/torvalds/linux/commit/1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 patch
• http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html advisory pihak ketiga · vdb entry
• https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html issue tracking · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20231020-0007/ advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5480 advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5492 advisory pihak ketiga
• https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10 release notes