Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2023-52795
HistoryMay 21, 2024 - 4:15 p.m.

CVE-2023-52795

2024-05-2116:15:18
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
vhost-vdpa
vulnerability fix
use after free
double free

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

vhost-vdpa: fix use after free in vhost_vdpa_probe()

The put_device() calls vhost_vdpa_release_dev() which calls
ida_simple_remove() and frees “v”. So this call to
ida_simple_remove() is a use after free and a double free.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%