CVE-2023-3159

A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/torvalds/linux/commit/b7c81f80246fac44077166f3e07103affe6db8ff	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:5.18:-::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc1::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc2::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc3::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc4::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc5::::::

History

20 Jun 2023, 20:29

Type	Values Removed	Values Added
CWE		CWE-416
References	~~(MISC) https://github.com/torvalds/linux/commit/b7c81f80246fac44077166f3e07103affe6db8ff -~~	(MISC) https://github.com/torvalds/linux/commit/b7c81f80246fac44077166f3e07103affe6db8ff - Patch
CPE		cpe:2.3:o:linux:linux_kernel:5.18:rc3:::::: cpe:2.3:o:linux:linux_kernel:5.18:-:::::: cpe:2.3:o:linux:linux_kernel:5.18:rc5:::::: cpe:2.3:o:linux:linux_kernel:5.18:rc2:::::: cpe:2.3:o:linux:linux_kernel:5.18:rc4:::::: cpe:2.3:o:linux:linux_kernel:5.18:rc1:::::: cpe:2.3:o:linux:linux_kernel::::::::
First Time		Linux Linux linux Kernel
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.7

12 Jun 2023, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-06-12 21:15

Updated : 2024-02-28 20:13

NVD link : CVE-2023-3159

Mitre link : CVE-2023-3159

CVE.ORG link : CVE-2023-3159

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-416

Use After Free

{"id": "CVE-2023-3159", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2023-06-12T21:15:22.937", "references": [{"url": "https://github.com/torvalds/linux/commit/b7c81f80246fac44077166f3e07103affe6db8ff", "tags": ["Patch"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-416"}]}, {"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails."}], "lastModified": "2023-06-20T20:29:24.710", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE93544F-B946-47CF-9697-FBF3484FCB92", "versionEndExcluding": "5.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0384FA0A-DE99-48D7-84E3-46ED0C3B5E03"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AD94161-84BB-42E6-9882-4FC0C42E9FC1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AB06DDF-3C2B-416D-B448-E990D8FF67A9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAE6C6C5-4D21-4C04-897C-70CBBB3D7B91"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA5F085D-52F3-4EE2-8353-455D1A6FE073"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6EE5B78-0D83-4715-893C-ABD69B49E7FC"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}