CVE-2023-4732CWE-366
Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h
Medium · published October 3, 2023
What it is
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.
The record
Technical detail
- CVSS v3.1
- 4.7 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00183 · 7.5th percentile
- Weakness
- CWE-366 · Race Condition within a Thread
- Published
- 2023-10-03T16:55Z
EPSS history
Timeline