PT-2024-13298 · Linux+2 · Linux Kernel+2

Msuhanov · Published 2023-09-28 · Updated 2026-05-26 · CVE-2023-45896

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.11 Linux kernel versions through 6.8.0

Description The issue allows a physically proximate attacker to read kernel memory by mounting a filesystem and then leveraging local access to trigger an out-of-bounds read. A length value can be larger than the amount of memory allocated. This can occur if a Linux distribution is configured to allow unprivileged mounts of removable media.

Recommendations For Linux kernel versions prior to 6.5.11, update to version 6.5.11 or later to resolve the issue. For Linux kernel versions through 6.8.0, consider restricting unprivileged mounts of removable media as a temporary workaround until a patch is available.

Fix

DoS

Improper Access Control

Incorrect Default Permissions

Weakness Enumeration

CWE-284

CWE-276

Related Identifiers

BDU:2025-07507

CVE-2023-45896

DLA-4008-1

OESA-2024-2123

OESA-2024-2125

OESA-2024-2126

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 59

• https://nvd.nist.gov/vuln/detail/CVE-2022-48902 · Security Note
• https://osv.dev/vulnerability/OESA-2024-2125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45896 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42259 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-45896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42276 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-44974 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-45896 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-45896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44935 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-45896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44942 · Security Note
• https://osv.dev/vulnerability/DLA-4008-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-45896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42102 · Security Note