PT-2023-2384 · Linux+6 · Linux Kernel+6

Published 2023-03-14 · Updated 2025-03-18 · CVE-2023-1859

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use-after-free flaw was found in the xen 9pfs front removet function in net/9p/trans xen.c in Xen transport for 9pfs. This issue could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2023-1434

ALT-PU-2023-1539

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-26783

BDU:2023-02166

CVE-2023-1859

DLA-3403-1

DLA-3404-1

MGASA-2023-0166

MGASA-2023-0173

OESA-2023-1215

OESA-2023-1216

OESA-2023-1228

OESA-2023-1229

OPENSUSE-SU-2023_3988-1

OPENSUSE-SU-2023_4057-1

OPENSUSE-SU-2023_4058-1

OPENSUSE-SU-2023_4071-1

OPENSUSE-SU-2023_4072-1

OPENSUSE-SU-2023_4072-2

OPENSUSE-SU-2023_4347-1

SUSE-SU-2023:3988-1

SUSE-SU-2023:4030-1

SUSE-SU-2023:4031-1

SUSE-SU-2023:4032-1

SUSE-SU-2023:4033-1

SUSE-SU-2023:4057-1

SUSE-SU-2023:4058-1

SUSE-SU-2023:4071-1

SUSE-SU-2023:4072-1

SUSE-SU-2023:4072-2

SUSE-SU-2023:4093-1

SUSE-SU-2023:4095-1

SUSE-SU-2023:4142-1

SUSE-SU-2023:4347-1

USN-6056-1

USN-6071-1

USN-6072-1

USN-6171-1

USN-6172-1

USN-6175-1

USN-6185-1

USN-6186-1

USN-6187-1

USN-6207-1

USN-6222-1

USN-6223-1

USN-6252-1

USN-6256-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Red Os

Suse

Ubuntu

References · 401

• https://osv.dev/vulnerability/SUSE-SU-2023:4032-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3390 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-30456 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3903 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1281 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3161 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-32233 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1859 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1859 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1216 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2124 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4744 · Security Note
• https://ubuntu.com/security/CVE-2023-1076 · Vendor Advisory