CVE-2023-3269

Опубликовано: 11 июл. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.

Ссылки

http://seclists.org/fulldisclosure/2023/Jul/43
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/07/28/1
Mailing List
http://www.openwall.com/lists/oss-security/2023/08/25/1
Mailing List
http://www.openwall.com/lists/oss-security/2023/08/25/4
Mailing List
https://access.redhat.com/security/cve/CVE-2023-3269
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2215268
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230908-0001/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/07/05/1
Mailing List
http://seclists.org/fulldisclosure/2023/Jul/43
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/07/28/1
Mailing List
http://www.openwall.com/lists/oss-security/2023/08/25/1
Mailing List
http://www.openwall.com/lists/oss-security/2023/08/25/4
Mailing List
https://access.redhat.com/security/cve/CVE-2023-3269
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2215268
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230908-0001/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/07/05/1
Mailing List

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.1 (включая) до 6.1.37 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.3.11 (исключая)

cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00175

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2023-3269

CVSS3: 7.8

ubuntu

почти 2 года назад

CVE-2023-3269

CVSS3: 7.8

redhat

почти 2 года назад

CVE-2023-3269

CVSS3: 7.8

msrc

почти 2 года назад

Описание отсутствует

CVE-2023-3269

CVSS3: 7.8

debian

почти 2 года назад

A vulnerability exists in the memory management subsystem of the Linux ...

GHSA-2j2w-8gvj-wjmj

CVSS3: 7.8

github

почти 2 года назад

EPSS

Процентиль: 40%

0.00175

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416