CVE-2023-40791

🗓️ 16 Oct 2023 00:00:00Reported by mitreType

CVE-2023-40791 extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situatio

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2023-40791	16 Oct 202303:15	–	attackerkb
BDU FSTEC	The vulnerability of the extract_user_to_sg() function in the lib/scatterlist.c module of the scatterlist library in the Linux operating system allows a attacker to compromise the integrity and accessibility of the protected information.	21 Oct 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-40791 affecting package kernel for versions less than 5.15.135.1-2	8 Nov 202302:07	–	cbl_mariner
CNNVD	Linux kernel security vulnerabilities	16 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-40791	16 Oct 202300:00	–	cvelist
Debian CVE	CVE-2023-40791	16 Oct 202300:00	–	debiancve
Microsoft CVE	extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation as demonstrated by a WARNING for try_grab_page.	20 Oct 202307:00	–	mscve
NVD	CVE-2023-40791	16 Oct 202303:15	–	nvd
OSV	AZL-31564 CVE-2023-40791 affecting package kernel for versions less than 5.15.135.1-2	16 Oct 202303:15	–	osv
OSV	BELL-CVE-2023-40791 CVE-2023-40791 does not affect BellSoft software	16 Oct 202303:15	–	osv

NVD

Node

Node

AND

Node

AND

Node

AND

Node

AND

Source	Link
lkml	www.lkml.org/lkml/2023/8/3/323
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
cdn	www.cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12
security	www.security.netapp.com/advisory/ntap-20231110-0009/
lore	www.lore.kernel.org/linux-crypto/20571.1690369076%40warthog.procyon.org.uk/

17 Jun 2026 06:19Current

6Medium risk

Vulners AI Score6

CVSS 3.16.3

EPSS0.00448