PT-2023-8763 · Linux+3 · Linux Kernel+3

Yonghong Song

·

Publicado

2023-12-14

·

Atualizado

2024-10-30

·

CVE-2023-52446

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0-rc3-00699-g90679706d486-dirty #494
Description The vulnerability is related to a race condition between btf put() and map free() in the Linux kernel. This issue can lead to a slab-use-after-free error, potentially allowing an attacker to impact the confidentiality, integrity, and availability of protected information. The error occurs at bpf rb root free+0x1f8/0x2b0.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Race Condition

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416CWE-362

Identificadores relacionados

BDU:2024-01841
CVE-2023-52446
USN-6765-1
USN-6818-1
USN-6818-2
USN-6818-3
USN-6818-4
USN-6819-1
USN-6819-2
USN-6819-3
USN-6819-4

Produtos afetados

Linuxmint
Linux Kernel
Red Os
Ubuntu