Lucene search
HistoryJan 11, 2024 - 7:15 p.m.
CVE-2023-51780
linux kernel
vcc_ioctl
vulnerability
use-after-free
net/atm/ioctl.c
race condition
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
High
EPSS
0
Percentile
5.1%
An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.
Affected configurations
Node
linuxlinux_kernelRange2.6.12–6.6.8
ORlinuxlinux_kernelMatch2.6.12rc2
ORlinuxlinux_kernelMatch2.6.12rc3
ORlinuxlinux_kernelMatch2.6.12rc4
ORlinuxlinux_kernelMatch2.6.12rc5
ORlinuxlinux_kernelMatch2.6.12rc6
ORlinuxlinux_kernelMatch6.7rc1
ORlinuxlinux_kernelMatch6.7rc2
ORlinuxlinux_kernelMatch6.7rc3
ORlinuxlinux_kernelMatch6.7rc4
ORlinuxlinux_kernelMatch6.7rc5
Node
debiandebian_linuxMatch10.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.12 | cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.12 | cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.12 | cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.12 | cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.12 | cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:* |
| linux | linux_kernel | 6.7 | cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:* |
| linux | linux_kernel | 6.7 | cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:* |
| linux | linux_kernel | 6.7 | cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:* |
| linux | linux_kernel | 6.7 | cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:* |
Related
osv
osv
CVE-2023-51780
2024-01-11 19:15:12
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
2024-02-20 20:06:59
nessus
nessus
redhatcve
redhatcve
CVE-2023-51780
2024-01-10 13:46:23
cvelist
cvelist
CVE-2023-51780
2023-12-25 00:00:00
prion
prion
Race condition
2024-01-11 19:15:00
ubuntucve
ubuntucve
CVE-2023-51780
2024-01-11 00:00:00
cbl_mariner
cbl_mariner
cve
cve
CVE-2023-51780
2024-01-11 19:15:12
debiancve
debiancve
CVE-2023-51780
2024-01-11 19:15:12
ubuntu
ubuntu
Linux kernel (Azure) vulnerabilities
2024-02-29 00:00:00
Linux kernel vulnerabilities
2024-02-21 00:00:00
Linux kernel vulnerabilities
2024-02-20 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6647-1)
2024-02-22 00:00:00
Ubuntu: Security Advisory (USN-6646-1)
2024-02-21 00:00:00
Ubuntu: Security Advisory (USN-6647-2)
2024-03-01 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2024-03-01 00:00:00
kernel security, bug fix, and enhancement update
2024-05-23 00:00:00
kernel security, bug fix, and enhancement update
2024-05-02 00:00:00
cloudlinux
cloudlinux
kernel: Fix of 7 CVEs
2024-02-29 11:06:21
kernel: Fix of 7 CVEs
2024-02-29 11:04:23
debian
debian
[SECURITY] [DSA 5593-1] linux security update
2024-01-01 13:25:21
[SECURITY] [DLA 3711-1] linux-5.10 security update
2024-01-11 17:58:27
[SECURITY] [DSA 5594-1] linux security update
2024-01-02 21:05:08
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0713
2024-01-16 00:00:00
redos
redos
ROS-20240812-16
2024-08-12 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2024-06-14 13:59:36
kernel security, bug fix, and enhancement update
2024-06-14 13:59:16
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities
2024-06-07 15:32:38
Security Bulletin: Vulnerabilities in Node.js, AngularJS, Golang Go, libcURL, PostgreSQL, Linux kernel might affect IBM Spectrum Protect Plus
2024-09-24 05:05:57
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-06-26 16:06:34
redhat
redhat
(RHSA-2024:2950) Moderate: kernel-rt security and bug fix update
2024-05-22 06:35:10
(RHSA-2024:3138) Moderate: kernel security, bug fix, and enhancement update
2024-05-22 06:35:43
(RHSA-2024:2394) Important: kernel security, bug fix, and enhancement update
2024-04-30 06:15:35
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-51780