CVE-2023-3567

Severity CVSS v4.0:
Pending analysis
Type:
CWE-416 Use After Free
Publication date:
24/07/2023
Last modified:
13/09/2024

Description

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2.0 (excluding)
cpe:2.3:o:linux:linux_kernel:6.2.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2.0:rc6:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*