PT-2022-6645 · Linux+5 · Linux Kernel+5

Syzbot · Published 2022-09-17 · Updated 2025-03-11 · CVE-2023-2985

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use after free flaw was found in the hfsplus put super() function in the Linux Kernel. This issue could allow a local user to cause a denial of service problem. The flaw is related to the use of memory after it has been freed, which can be exploited to disrupt service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2023-1878

ALT-PU-2023-1881

ALT-PU-2023-4663

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27062

BDU:2023-03110

CVE-2023-2985

OESA-2023-1352

OESA-2023-1353

OESA-2023-1368

OESA-2023-1369

OPENSUSE-SU-2023_3171-1

OPENSUSE-SU-2023_3172-1

OPENSUSE-SU-2023_3180-1

OPENSUSE-SU-2023_3182-1

OPENSUSE-SU-2023_3302-1

OPENSUSE-SU-2023_3318-1

OPENSUSE-SU-2023_3391-1

OPENSUSE-SU-2023_3392-1

SUSE-SU-2023:3006-1

SUSE-SU-2023:3171-1

SUSE-SU-2023:3172-1

SUSE-SU-2023:3180-1

SUSE-SU-2023:3182-1

SUSE-SU-2023:3302-1

SUSE-SU-2023:3309-1

SUSE-SU-2023:3318-1

SUSE-SU-2023:3324-1

SUSE-SU-2023:3349-1

SUSE-SU-2023:3390-1

SUSE-SU-2023:3391-1

SUSE-SU-2023:3392-1

SUSE-SU-2023:3421-1

SUSE-SU-2023_3006-1

SUSE-SU-2023_3171-1

SUSE-SU-2023_3172-1

SUSE-SU-2023_3180-1

SUSE-SU-2023_3182-1

USN-6171-1

USN-6172-1

USN-6185-1

USN-6187-1

USN-6207-1

USN-6222-1

USN-6223-1

USN-6256-1

USN-6309-1

USN-6327-1

USN-6342-1

USN-6342-2

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

References · 357

• https://osv.dev/vulnerability/USN-6185-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3567 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33288 · Security Note
• https://osv.dev/vulnerability/USN-6309-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3302-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6342-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3421-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-35788 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1859 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3182-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-27062 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6187-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48502 · Security Note