CVE-2023-2007CWE-367

The specific flaw exists within the DPT I2O Controller driver

published April 24, 2023

CVSS
—
EPSS
0%
Percentile
18.4
In the wild
Unconfirmed
What it is

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.4th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2023-04-24T00:00Z
EPSS history
Timeline
  • 24 APR 00:00Z
    The specific flaw exists within the DPT I2O Controller driver
    cvelistv5