CVE-2023-4394

Summary

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information

Affected Software

Weaknesses

• CWE-400: Uncontrolled Resource Consumption

ADP Enrichment

CVE Program Container

Additional References

• https://access.redhat.com/security/cve/CVE-2023-4394
• https://bugzilla.redhat.com/show_bug.cgi?id=2219263
• https://patchwork.kernel.org/project/linux-btrfs/patch/20220815151606.3479183-1-r33s3n6@gmail.com/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://access.redhat.com/security/cve/CVE-2023-4394
• https://bugzilla.redhat.com/show_bug.cgi?id=2219263
• https://patchwork.kernel.org/project/linux-btrfs/patch/20220815151606.3479183-1-r33s3n6@gmail.com/

• ←Previous
• Next→