Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-52902
HistoryAug 21, 2024 - 7:15 a.m.

CVE-2023-52902

2024-08-2107:15:06
Debian Security Bug Tracker
security-tracker.debian.org
linux kernel
memory leak
vulnerability
fixed
nommu
do_mmap
error path

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.5%

In the Linux kernel, the following vulnerability has been resolved: nommu: fix memory leak in do_mmap() error path The preallocation of the maple tree nodes may leak if the error path to “error_just_free” is taken. Fix this by moving the freeing of the maple tree nodes to a shared location for all error paths.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.5%

Related for DEBIANCVE:CVE-2023-52902