PT-2023-3339 · Linux+8 · Linux Kernel+8

Zhang Zhengming · Published 2023-04-19 · Updated 2025-03-11 · CVE-2023-3268

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory access flaw was found in the Linux kernel, specifically in the relayfs, related to incorrect calculation of the start position for reading in the relay file read start pos() function in kernel/relay.c. This issue could allow a local attacker to crash the system or leak internal kernel information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2023:7077

ALT-PU-2023-4401

ALT-PU-2023-4482

ALT-PU-2023-4663

ALT-PU-2023-4764

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27248

BDU:2023-03495

CESA-2023_6901

CESA-2023_7077

CVE-2023-3268

DLA-3508-1

DLA-3623-1

DSA-5448-1

DSA-5480-1

MGASA-2023-0201

MGASA-2023-0202

OESA-2023-1379

OESA-2023-1380

OESA-2023-1381

OESA-2023-1382

OESA-2023-1493

OPENSUSE-SU-2023_2859-1

OPENSUSE-SU-2023_3302-1

OPENSUSE-SU-2023_3311-1

OPENSUSE-SU-2023_3313-1

OPENSUSE-SU-2023_3318-1

OPENSUSE-SU-2023_3376-1

OPENSUSE-SU-2023_3377-1

RHSA-2023:6583

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_6901

RHSA-2023_7077

RHSA-2024:0412

RHSA-2024:1250

RHSA-2024:1306

SUSE-SU-2023:2804-1

SUSE-SU-2023:2808-1

SUSE-SU-2023:2810-1

SUSE-SU-2023:2822-1

SUSE-SU-2023:2830-1

SUSE-SU-2023:2834-1

SUSE-SU-2023:2859-1

SUSE-SU-2023:3302-1

SUSE-SU-2023:3311-1

SUSE-SU-2023:3313-1

SUSE-SU-2023:3318-1

SUSE-SU-2023:3324-1

SUSE-SU-2023:3333-1

SUSE-SU-2023:3376-1

SUSE-SU-2023:3377-1

USN-6252-1

USN-6254-1

USN-6283-1

USN-6300-1

USN-6311-1

USN-6332-1

USN-6340-1

USN-6340-2

USN-6347-1

USN-6349-1

USN-6357-1

USN-6397-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 535

• 🔥 https://lore.kernel.org/lkml/[e-mail]/T · Exploit
• https://ubuntu.com/security/CVE-2023-35828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3159 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-27248 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0458 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3623-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6347-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6252-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6254-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6340-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35824 · Security Note
• https://ubuntu.com/security/CVE-2023-3611 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2124 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-32248 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1380 · Vendor Advisory