PT-2023-2678 · Linux+8 · Linux Kernel+8
Yu Hao
·
Publicado
2023-04-17
·
Atualizado
2025-03-18
·
CVE-2023-31084
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 6.2
Description
An issue was discovered in the Linux kernel, specifically in the drivers/media/dvb-core/dvb frontend.c file. The problem arises from a blocking operation when a task is not in the TASK RUNNING state. This occurs in the dvb frontend get event function, where wait event interruptible is called with the condition dvb frontend test event(fepriv, events). Within dvb frontend test event, down(&fepriv->sem) is called, which may block the process. The exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations
For Linux kernel version 6.2, as a temporary workaround, consider disabling the
dvb frontend test event() function until a patch is available. Restrict access to the vulnerable module drivers/media/dvb-core/dvb frontend.c to minimize the risk of exploitation. Avoid using the fepriv and events variables in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Improper Locking
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu