Lucene search

K
nvd[email protected]NVD:CVE-2023-35828
HistoryJun 18, 2023 - 10:15 p.m.

CVE-2023-35828

2023-06-1822:15:09
CWE-416
CWE-362
web.nvd.nist.gov
6
cve-2023-35828
linux kernel
use-after-free
renesas_usb3_remove
usb gadget
udc
renesas_usb3.c

CVSS3

7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

14.9%

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

Affected configurations

Nvd
Node
linuxlinux_kernelRange4.194.19.283
OR
linuxlinux_kernelRange4.205.4.243
OR
linuxlinux_kernelRange5.55.10.180
OR
linuxlinux_kernelRange5.115.15.111
OR
linuxlinux_kernelRange5.166.1.28
OR
linuxlinux_kernelRange6.26.2.15
OR
linuxlinux_kernelRange6.36.3.2
Node
netapph300sMatch-
OR
netapph410cMatch-
OR
netapph410sMatch-
OR
netapph500sMatch-
OR
netapph700sMatch-
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
netapph300s-cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
netapph410c-cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
netapph410s-cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
netapph500s-cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
netapph700s-cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

CVSS3

7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

14.9%