CVE-2023-2008

2023-04-1400:00:00

CWE-129

redhat

www.cve.org

linux kernel

udmabuf

device driver

memory access

privilege escalation

arbitrary code

0.001 Low

EPSS

Percentile

39.6%

JSON

A flaw was found in the Linux kernel’s udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux kernel udmabuf device driver",
    "versions": [
      {
        "version": "Fixed in kernel v5.19-rc4",
        "status": "affected"
      }
    ]
  }
]