CVE-2023-3567
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
24/07/2023
Last modified:
13/09/2024
Description
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.
Impact
Base Score 3.x
7.10
Severity 3.x
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2.0 (excluding) | |
cpe:2.3:o:linux:linux_kernel:6.2.0:rc1:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:6.2.0:rc2:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:6.2.0:rc3:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:6.2.0:rc4:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:6.2.0:rc5:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:6.2.0:rc6:*:*:*:*:*:* | ||
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://access.redhat.com/errata/RHSA-2024:0412
- https://access.redhat.com/errata/RHSA-2024:0431
- https://access.redhat.com/errata/RHSA-2024:0432
- https://access.redhat.com/errata/RHSA-2024:0439
- https://access.redhat.com/errata/RHSA-2024:0448
- https://access.redhat.com/errata/RHSA-2024:0575
- https://access.redhat.com/errata/RHSA-2024:2394
- https://access.redhat.com/errata/RHSA-2024:2950
- https://access.redhat.com/errata/RHSA-2024:3138
- https://access.redhat.com/security/cve/CVE-2023-3567
- https://bugzilla.redhat.com/show_bug.cgi?id=2221463
- https://www.spinics.net/lists/stable-commits/msg285184.html