PT-2022-6661 · Linux+4 · Linux Kernel+4

Published 2022-04-25 · Updated 2023-09-06 · CVE-2023-3159

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use after free issue was discovered in the driver/firewire component of the Linux Kernel, specifically in the outbound phy packet callback function. This flaw allows a local attacker with special privileges to cause a use after free problem when the queue event() function fails, potentially impacting the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-2050

ALT-PU-2022-2131

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-27180

BDU:2023-03171

CVE-2023-3159

OESA-2023-1393

OESA-2023-1397

OPENSUSE-SU-2023_2859-1

SUSE-SU-2023:2804-1

SUSE-SU-2023:2805-1

SUSE-SU-2023:2808-1

SUSE-SU-2023:2810-1

SUSE-SU-2023:2822-1

SUSE-SU-2023:2830-1

SUSE-SU-2023:2834-1

SUSE-SU-2023:2859-1

SUSE-SU-2023:3035-1

SUSE-SU-2023:3046-1

SUSE-SU-2023:3069-1

SUSE-SU-2023:3073-1

SUSE-SU-2023:3075-1

SUSE-SU-2023:3081-1

SUSE-SU-2023:3083-1

SUSE-SU-2023:3104-1

SUSE-SU-2023:3107-1

SUSE-SU-2023:3333-1

USN-6254-1

USN-6341-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Suse

Ubuntu

References · 248

• https://github.com/torvalds/linux/commit/b7c81f80246fac44077166f3e07103affe6db8ff · Patch
• https://osv.dev/vulnerability/AZL-27180 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3073-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3567 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3069-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12566.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3083-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2513 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3006 · Security Note
• https://ubuntu.com/security/CVE-2023-0458 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2859-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3075-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35828 · Security Note