A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.
References
| Link | Resource |
|---|---|
| https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang%40redhat.com/T/ | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20230517-0003/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
15 Feb 2024, 15:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang%40redhat.com/T/ - Third Party Advisory | |
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20230517-0003/ - Third Party Advisory, VDB Entry | |
| First Time |
Netapp h410c
Netapp h500s Netapp h700s Netapp h410s Netapp Netapp h300s |
|
| CPE | cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* |
07 Nov 2023, 04:05
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2023-04-05 19:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-1838
Mitre link : CVE-2023-1838
CVE.ORG link : CVE-2023-1838
JSON object : View
Products Affected
linux
- linux_kernel
netapp
- h700s
- h410c
- h410s
- h500s
- h300s
CWE
CWE-416
Use After Free