PT-2022-6507 · Linux+6 · Linux Kernel+6

Published 2020-06-04 · Updated 2025-02-13 · CVE-2023-1582

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition issue was found in the memory management sub-component of the Linux kernel, specifically in fs/proc/task mmu.c. This issue may allow a local attacker with user privilege to cause a denial of service. The vulnerability is related to concurrent access to the page memory counter between the page mapcount() and split huge page() functions in the task mmu.c module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALSA-2023:2736

ALSA-2023:2951

ALT-PU-2020-2098

ALT-PU-2020-2164

ALT-PU-2020-2209

ALT-PU-2020-2409

ALT-PU-2020-2432

ALT-PU-2020-2687

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2023-01798

CESA-2023_2736

CESA-2023_2951

CVE-2023-1582

OESA-2023-1215

OESA-2023-1228

OESA-2023-1229

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

OPENSUSE-SU-2024_2947-1

OPENSUSE-SU-2024_3249-1

RHSA-2023:2736

RHSA-2023:2951

RHSA-2023_2736

RHSA-2023_2951

SUSE-SU-2023:1800-1

SUSE-SU-2023:1802-1

SUSE-SU-2023:1811-1

SUSE-SU-2023:1892-1

SUSE-SU-2023:1897-1

SUSE-SU-2023:1992-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2947-1

SUSE-SU-2024:3249-1

SUSE-SU-2024:3499-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1627

• https://osv.dev/vulnerability/SUSE-SU-2024:3499-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1582 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1855 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1215 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2929-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1228 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1611 · Security Note
• https://errata.almalinux.org/8/ALSA-2023-2736.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2951.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:1802-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1637 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:2809-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1582 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-4744 · Security Note