CVE-2023-2513

2023-05-0800:00:00

CWE-416

redhat

www.cve.org

linux

kernel

ext4

filesystem

use-after-free

vulnerability

cve-2023-2513

inode

size

extended attributes

privileged

local user

system crash

undefined behaviors

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability was found in the Linux kernel’s ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux kernel ext4 filesystem",
    "versions": [
      {
        "version": "Fixed in kernel 6.0-rc1",
        "status": "affected"
      }
    ]
  }
]