PT-2023-1007 · Linux+3 · Linux Kernel+3

Published 2023-05-19 · Updated 2026-03-13 · CVE-2023-21264

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to a memory access check in the wrong place in multiple functions of mem protect.c, which could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. The vulnerability is associated with incorrect memory page state checking in the KVM subsystem, potentially allowing an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Out of bounds Read

Weakness Enumeration

CWE-119

CWE-125

Related Identifiers

ASB-A-279739439

BDU:2023-04648

CVE-2023-21264

ECHO-89FA-8080-8BC4

USN-6383-1

USN-6466-1

Affected Products

Debian

Linux Kernel

Linuxmint

Ubuntu

References · 65

• https://ubuntu.com/security/CVE-2023-4134 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-38430 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45887 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3867 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4194 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-38431 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20569 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-38427 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-5197 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-21264 · Vendor Advisory
• https://source.android.com/security/bulletin/2023-08-01 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-279739439 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40283 · Vendor Advisory