CVE-2023-3268CWE-125

CVE-2023-3268

High · published June 16, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00516 · 43.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-06-16T23:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.22, < 4.19.2834.19.283
linux/linux_kernel≥ 4.20, < 5.4.2435.4.243
linux/linux_kernel≥ 5.5, < 5.10.1805.10.180
linux/linux_kernel≥ 5.11, < 5.15.1115.15.111
linux/linux_kernel≥ 5.16, < 6.1.286.1.28
linux/linux_kernel≥ 6.2, < 6.2.156.2.15
linux/linux_kernel≥ 6.3, < 6.3.26.3.2
debian/debian_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (18)
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1 · [email protected]https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html · [email protected]https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html · [email protected]https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/ · [email protected]https://security.netapp.com/advisory/ntap-20230824-0006/ · [email protected]https://www.debian.org/security/2023/dsa-5448 · [email protected]https://www.debian.org/security/2023/dsa-5480 · [email protected]https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230824-0006/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2023/dsa-5448 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2023/dsa-5480 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-806742.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 16 JUN 00:00Z
    An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs
    cvelistv5