CVE-2023-4611CWE-416

CVE-2023-4611

High · published August 30, 2023

CVSS v3.1
7.0
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-416 · Use After Free
Published
2023-08-30T02:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 6.4, < 6.4.86.4.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://access.redhat.com/security/cve/CVE-2023-4611 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2227244 · [email protected]https://www.spinics.net/lists/stable-commits/msg310136.html · [email protected]https://access.redhat.com/security/cve/CVE-2023-4611 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2227244 · af854a3a-2127-422b-91ae-364da2661108https://www.spinics.net/lists/stable-commits/msg310136.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 AUG 21:25Z
    Use after free race between mbind() and vma-locked page fault
    cvelistv5