Lucene search

K
nvd[email protected]NVD:CVE-2023-6039
HistoryNov 09, 2023 - 3:15 p.m.

CVE-2023-6039

2023-11-0915:15:09
CWE-416
web.nvd.nist.gov
vulnerability
network sub-component
usb device

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component, net/usb/lan78xx in the Linux Kernel. This flaw allows a local attacker to crash the system when the LAN78XX USB device detaches.

Affected configurations

NVD
Node
linuxlinux_kernelRange<6.5
OR
linuxlinux_kernelMatch6.5rc1
OR
linuxlinux_kernelMatch6.5rc2
OR
linuxlinux_kernelMatch6.5rc3
OR
linuxlinux_kernelMatch6.5rc4

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%