A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2023/Jul/43 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2023/07/28/1 | Mailing List |
| http://www.openwall.com/lists/oss-security/2023/08/25/1 | Mailing List |
| http://www.openwall.com/lists/oss-security/2023/08/25/4 | Mailing List |
| https://access.redhat.com/security/cve/CVE-2023-3269 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2215268 | Issue Tracking Patch Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/ | Mailing List Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20230908-0001/ | Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2023/07/05/1 | Mailing List |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2023-07-11 12:15
Updated : 2023-11-07 04:18
NVD link : CVE-2023-3269
Mitre link : CVE-2023-3269
CVE.ORG link : CVE-2023-3269
JSON object : View
Products Affected
redhat
- enterprise_linux
fedoraproject
- fedora
linux
- linux_kernel
CWE
CWE-416
Use After Free