Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Mike Rappoport

#45105de 53,638
5.5CVSS total
Vulnerabilidades · 1
PT-2023-8734
5.5
2023-09-18
Linux · Linux Kernel · CVE-2023-52576
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the `ima free kexec buffer()` function. This function runs after the memblock allocator has been torn down, potentially resulting in a use-after-free in `memblock isolate range()`. With KASAN or KFENCE, this use-after-free will result in a BUG from the idle task and a subsequent kernel panic. The vulnerability can be exploited by a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.