Lucene search

[email protected]CVE-2023-35828

HistoryJun 18, 2023 - 10:15 p.m.

CVE-2023-35828

2023-06-1822:15:09

CWE-362

CWE-416

[email protected]

web.nvd.nist.gov

cve-2023-35828

linux kernel

use-after-free

renesas_usb3_remove

nvd

security vulnerability

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

Affected configurations

NVD

Node

linuxlinux_kernelRange4.19–4.19.283

linuxlinux_kernelRange4.20–5.4.243

linuxlinux_kernelRange5.5–5.10.180

linuxlinux_kernelRange5.11–5.15.111

linuxlinux_kernelRange5.16–6.1.28

linuxlinux_kernelRange6.2–6.2.15

linuxlinux_kernelRange6.3–6.3.2

Node

netapph300sMatch-

netapph410cMatch-

netapph410sMatch-

netapph500sMatch-

netapph700sMatch-

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt4.19.283
linux:linux_kernellinux linux kernellt5.4.243
linux:linux_kernellinux linux kernellt5.10.180
linux:linux_kernellinux linux kernellt5.15.111
linux:linux_kernellinux linux kernellt6.1.28
linux:linux_kernellinux linux kernellt6.2.15
linux:linux_kernellinux linux kernellt6.3.2

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	4.19.283
linux:linux_kernel	linux linux kernel	lt	5.4.243
linux:linux_kernel	linux linux kernel	lt	5.10.180
linux:linux_kernel	linux linux kernel	lt	5.15.111
linux:linux_kernel	linux linux kernel	lt	6.1.28
linux:linux_kernel	linux linux kernel	lt	6.2.15
linux:linux_kernel	linux linux kernel	lt	6.3.2