PT-2023-3975 · Linux+6 · Linux Kernel+6

Rohit Keshri · Published 2023-06-26 · Updated 2024-11-21 · CVE-2023-3863

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free flaw was found in the nfc llcp find local function in net/nfc/llcp core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue, potentially affecting the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2023-5748

ALT-PU-2023-5787

ALT-PU-2023-7004

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27766

BDU:2023-04271

CVE-2023-3863

DLA-3623-1

DSA-5480-1

DSA-5492-1

OESA-2023-1494

OESA-2023-1495

OESA-2023-1511

OESA-2023-1512

OESA-2023-1513

OPENSUSE-SU-2023_3302-1

OPENSUSE-SU-2023_3311-1

OPENSUSE-SU-2023_3376-1

OPENSUSE-SU-2023_3599-1

OPENSUSE-SU-2023_3599-2

OPENSUSE-SU-2023_3600-1

OPENSUSE-SU-2023_3600-2

OPENSUSE-SU-2023_3656-1

OPENSUSE-SU-2023_3680-1

OPENSUSE-SU-2023_3682-1

OPENSUSE-SU-2023_3683-1

OPENSUSE-SU-2023_3683-2

OPENSUSE-SU-2023_3684-1

OPENSUSE-SU-2023_3704-1

OPENSUSE-SU-2023_3704-2

OPENSUSE-SU-2023_3964-1

OPENSUSE-SU-2023_3969-1

OPENSUSE-SU-2023_3971-1

OPENSUSE-SU-2023_3988-1

SUSE-SU-2023:3302-1

SUSE-SU-2023:3311-1

SUSE-SU-2023:3376-1

SUSE-SU-2023:3599-1

SUSE-SU-2023:3599-2

SUSE-SU-2023:3600-1

SUSE-SU-2023:3600-2

SUSE-SU-2023:3601-1

SUSE-SU-2023:3656-1

SUSE-SU-2023:3680-1

SUSE-SU-2023:3681-1

SUSE-SU-2023:3682-1

SUSE-SU-2023:3684-1

SUSE-SU-2023:3687-1

SUSE-SU-2023:3705-1

SUSE-SU-2023:3785-1

SUSE-SU-2023:3964-1

SUSE-SU-2023:3969-1

SUSE-SU-2023:3971-1

SUSE-SU-2023:3988-1

USN-6285-1

USN-6385-1

USN-6388-1

USN-6396-1

USN-6396-2

USN-6396-3

USN-6416-1

USN-6416-2

USN-6416-3

USN-6417-1

USN-6445-1

USN-6445-2

USN-6464-1

USN-6466-1

USN-6520-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 520

• https://github.com/torvalds/linux/commit/6709d4b7bc2e079241fdef15d1160581c5261c10 · Patch
• https://debian.org/security/2023/dsa-5492 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4387 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2898 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6416-3 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6466-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-3863 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3390 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-27766 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3866 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3302-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4132 · Security Note
• https://osv.dev/vulnerability/DLA-3623-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3212 · Vendor Advisory