CVE-2023-52837CWE-416

CVE-2023-52837

High · published May 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nbd: fix uaf in nbd_open

Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and

blk_cleanup_disk") cleans up disk by blk_cleanup_disk() and it won't set

disk->private_data as NULL as before. UAF may be triggered in nbd_open()

if someone tries to open nbd device right after nbd_put() since nbd has

been free in nbd_dev_remove().

Fix this by implementing ->free_disk and free private data in it.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.5th percentile
Weakness
CWE-416 · Use After Free
Published
2024-05-21T20:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.14, < 6.1.636.1.63
linux/linux_kernel≥ 6.2, < 6.5.126.5.12
linux/linux_kernel≥ 6.6, < 6.6.26.6.2
References (8)
EPSS history
Timeline
  • 21 MAY 15:31Z
    nbd: fix uaf in nbd_open
    cvelistv5