PT-2023-1054 · Linux+1 · Linux Kernel+1

Alex · Publicado 2019-03-25 · Atualizado 2026-05-26 · CVE-2023-0030

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free flaw was found in the Linux kernel’s nouveau driver, related to how a user triggers a memory overflow that causes the nvkm vma tail function to fail. This issue allows a local user to crash or potentially escalate their privileges on the system. The flaw is also associated with incorrect memory overflow handling in the nvkm vmm pfn map function of the GPU Nouveau driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2019-1506

ALT-PU-2019-1548

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2023-00161

CVE-2023-0030

Produtos afetados

Alt Linux

Linux Kernel

Referências · 21

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=2157270 · Exploit
• https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10 · Correção
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=729eba3355674f2d9524629b73683ba1d1cd3f10 · Nota
• https://security-tracker.debian.org/tracker/CVE-2023-0030 · Aviso do Fabricante
• https://lore.kernel.org/all/[e-mail] · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-0030 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-0030 · Aviso do Fabricante
• https://git.kernel.org/linus/729eba3355674f2d9524629b73683ba1d1cd3f10 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0030 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-0030 · Nota
• https://security.netapp.com/advisory/ntap-20230413-0010 · Nota
• https://bdu.fstec.ru/vul/2023-00161 · Nota de Segurança
• https://t.me/cibsecurity/59714 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2023-0030 · Nota de Segurança
• https://lore.kernel.org/all/[e-mail] · Nota