PT-2023-3516 · Linux+10 · Linux Kernel+10
Publicado
2023-05-10
·
Atualizado
2025-07-11
·
CVE-2023-3090
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing
skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG IPVLAN is enabled.Recommendations
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
Exploit
Correção
LPE
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Linux Kernel
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu