Lucene search
HistoryJul 11, 2023 - 4:15 p.m.
CVE-2023-3108
linux kernel
symmetric key cipher
flaw
local user
crash
CVSS3
4.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6
Confidence
High
EPSS
0
Percentile
5.1%
A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to crash the system.
Affected configurations
Node
linuxlinux_kernelRange<4.0
Related
prion
prion
Design/Logic Flaw
2023-07-11 16:15:00
ubuntucve
ubuntucve
CVE-2023-3108
2023-07-11 00:00:00
debiancve
debiancve
CVE-2023-3108
2023-07-11 16:15:12
cve
cve
CVE-2023-3108
2023-07-11 16:15:12
cvelist
cvelist
openvas
openvas
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-3418)
2023-12-14 00:00:00
nessus
nessus
EulerOS Virtualization 3.0.6.6 : kernel (EulerOS-SA-2023-3418)
2024-01-16 00:00:00
RHEL 7 : kernel (Unpatched Vulnerability)
2024-05-11 00:00:00
CVSS3
4.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-3108