PT-2023-3975 · Linux+6 · Linux Kernel+6

Rohit Keshri · Publicado 2023-06-26 · Atualizado 2024-11-21 · CVE-2023-3863

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free flaw was found in the nfc llcp find local function in net/nfc/llcp core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue, potentially affecting the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2023-5748

ALT-PU-2023-5787

ALT-PU-2023-7004

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27766

BDU:2023-04271

CVE-2023-3863

DLA-3623-1

DSA-5480-1

DSA-5492-1

OESA-2023-1494

OESA-2023-1495

OESA-2023-1511

OESA-2023-1512

OESA-2023-1513

OPENSUSE-SU-2023_3302-1

OPENSUSE-SU-2023_3311-1

OPENSUSE-SU-2023_3376-1

OPENSUSE-SU-2023_3599-1

OPENSUSE-SU-2023_3599-2

OPENSUSE-SU-2023_3600-1

OPENSUSE-SU-2023_3600-2

OPENSUSE-SU-2023_3656-1

OPENSUSE-SU-2023_3680-1

OPENSUSE-SU-2023_3682-1

OPENSUSE-SU-2023_3683-1

OPENSUSE-SU-2023_3683-2

OPENSUSE-SU-2023_3684-1

OPENSUSE-SU-2023_3704-1

OPENSUSE-SU-2023_3704-2

OPENSUSE-SU-2023_3964-1

OPENSUSE-SU-2023_3969-1

OPENSUSE-SU-2023_3971-1

OPENSUSE-SU-2023_3988-1

SUSE-SU-2023:3302-1

SUSE-SU-2023:3311-1

SUSE-SU-2023:3376-1

SUSE-SU-2023:3599-1

SUSE-SU-2023:3599-2

SUSE-SU-2023:3600-1

SUSE-SU-2023:3600-2

SUSE-SU-2023:3601-1

SUSE-SU-2023:3656-1

SUSE-SU-2023:3680-1

SUSE-SU-2023:3681-1

SUSE-SU-2023:3682-1

SUSE-SU-2023:3684-1

SUSE-SU-2023:3687-1

SUSE-SU-2023:3705-1

SUSE-SU-2023:3785-1

SUSE-SU-2023:3964-1

SUSE-SU-2023:3969-1

SUSE-SU-2023:3971-1

SUSE-SU-2023:3988-1

USN-6285-1

USN-6385-1

USN-6388-1

USN-6396-1

USN-6396-2

USN-6396-3

USN-6416-1

USN-6416-2

USN-6416-3

USN-6417-1

USN-6445-1

USN-6445-2

USN-6464-1

USN-6466-1

USN-6520-1

Produtos afetados

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

Referências · 520

• https://github.com/torvalds/linux/commit/6709d4b7bc2e079241fdef15d1160581c5261c10 · Correção
• https://bugzilla.suse.com/1210448 · Nota
• https://debian.org/security/2023/dsa-5492 · Aviso do Fabricante
• https://bugzilla.suse.com/1210565 · Nota
• https://ubuntu.com/security/CVE-2023-4387 · Aviso do Fabricante
• https://bugzilla.suse.com/1214000 · Nota
• https://bugzilla.suse.com/1214297 · Nota
• https://suse.com/security/cve/CVE-2022-40982 · Nota
• https://bugzilla.suse.com/1208995 · Nota
• https://bugzilla.suse.com/1213620 · Nota
• https://suse.com/support/update/announcement/2023/suse-su-20233684-1 · Nota
• https://ubuntu.com/security/CVE-2023-2898 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-6416-3 · Aviso do Fabricante
• https://bugzilla.suse.com/1214729 · Nota
• https://osv.dev/vulnerability/USN-6466-1 · Aviso do Fabricante