Skip to content
OpenAdvisories
Medium WID-SEC-2023-2821 2 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Nov 2, 2023 · Updated Apr 16, 2024 · Revision 3 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Informationen offenzulegen, Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 2

  • High 7.1

    Use-after-free in parse_lease_state()

    An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check …

  • High 7.0

    Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222

    A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privil…

Revision history

  1. #3

    Neue Updates von Ubuntu aufgenommen

  2. #2

    Neue Updates von Ubuntu aufgenommen

  3. #1

    Initiale Fassung

References