CVE-2023-1476

Summary

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.

Affected Software

Weaknesses

• CWE-416: Use After Free

ADP Enrichment

CVE Program Container

Additional References

• https://access.redhat.com/errata/RHSA-2023:1659
• https://access.redhat.com/security/cve/CVE-2023-1476
• https://bugzilla.redhat.com/show_bug.cgi?id=2176035
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://access.redhat.com/errata/RHSA-2023:1659
• https://access.redhat.com/security/cve/CVE-2023-1476
• https://bugzilla.redhat.com/show_bug.cgi?id=2176035
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2

• ←Previous
• Next→