PT-2023-1007 · Linux+3 · Linux Kernel+3

Publicado 2023-05-19 · Atualizado 2026-03-13 · CVE-2023-21264

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to a memory access check in the wrong place in multiple functions of mem protect.c, which could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. The vulnerability is associated with incorrect memory page state checking in the KVM subsystem, potentially allowing an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Out of bounds Read

Enumeração de Fraquezas

CWE-119

CWE-125

Identificadores relacionados

ASB-A-279739439

BDU:2023-04648

CVE-2023-21264

ECHO-89FA-8080-8BC4

USN-6383-1

USN-6466-1

Produtos afetados

Debian

Linux Kernel

Linuxmint

Ubuntu

Referências · 65

• https://ubuntu.com/security/CVE-2023-4134 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-4244 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-38430 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2022-45887 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-3867 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-4194 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-38431 · Aviso do Fabricante
• https://git.kernel.org/linus/09cce60bddd6461a93a5bf434265a47827d1bc6f · Nota
• https://ubuntu.com/security/CVE-2023-20569 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-4273 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-38427 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-5197 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-21264 · Aviso do Fabricante
• https://source.android.com/security/bulletin/2023-08-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/ASB-A-279739439 · Aviso do Fabricante