PT-2023-5335 · Linux+5 · Linux Kernel+5
David Laight
·
Publicado
2023-09-05
·
Atualizado
2026-03-24
·
CVE-2023-42752
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An integer overflow flaw was found in the Linux kernel, leading to the kernel allocating
skb shared info in the userspace. This issue is exploitable in systems without SMAP protection since skb shared info contains references to function pointers. The vulnerability can be exploited locally, allowing an attacker to potentially execute code at the kernel level by manipulating network sockets in userspace. The issue can be mitigated by enabling the SMAP protection mechanism in the kernel.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu