Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rc9p-5gf8-h3m8

Опубликовано: 05 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

EPSS

Процентиль: 1%
0.00011
Низкий

7.1 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 2 лет назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

CVSS3: 7.1
redhat
около 3 лет назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

CVSS3: 7.1
nvd
около 2 лет назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

CVSS3: 7.1
msrc
около 2 лет назад

Описание отсутствует

CVSS3: 7.1
debian
около 2 лет назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vh ...

EPSS

Процентиль: 1%
0.00011
Низкий

7.1 High

CVSS3

Дефекты

CWE-416