CVE-2023-45863CWE-787
CVE-2023-45863
Medium · published October 15, 2023
What it is
An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.
The record
Technical detail
- CVSS v3.1
- 6.4 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00285 · 19.9th percentile
- Weakness
- CWE-787 · Out-of-bounds Write
- Published
- 2023-10-15T01:15Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| linux/linux_kernel | < 6.2.3 | 6.2.3 |
References (12)
EPSS history
Timeline