Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rc9p-5gf8-h3m8

Опубликовано: 05 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

EPSS

Процентиль: 4%
0.00019
Низкий

7.1 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.1
ubuntu
почти 3 года назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

CVSS3: 7.1
redhat
больше 3 лет назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

CVSS3: 7.1
nvd
почти 3 года назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.

CVSS3: 7.1
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 7.1
debian
почти 3 года назад

A use-after-free flaw was found in vhost_net_set_backend in drivers/vh ...

EPSS

Процентиль: 4%
0.00019
Низкий

7.1 High

CVSS3

Дефекты

CWE-416