CVE-2023-1252

2023-03-2300:00:00

CWE-416

redhat

www.cve.org

linux kernel

ext4 file system

use-after-free

file operations

overlay fs

local user

crash

privileges

patch 9a2544037600

AI Score

7.8

Confidence

High

EPSS

Percentile

5.1%

JSON

A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 (“ovl: fix use after free in struct ovl_aio_req”) not applied yet, the kernel could be affected.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Linux kernel 5.16-rc1",
        "status": "affected"
      }
    ]
  }
]