CVE-2023-1652

2023-03-2900:00:00

CWE-416

redhat

www.cve.org

use-after-free

nfsd4_ssc_setup_dul

linux kernel

nfs filesystem

local attacker

crash

kernel information leak

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux Kernel",
    "versions": [
      {
        "version": "Kernel 6.2 RC5",
        "status": "affected"
      }
    ]
  }
]