Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2008
HistoryApr 14, 2023 - 9:15 p.m.

Design/Logic Flaw

2023-04-1421:15:00
PRIOn knowledge base
www.prio-n.com
7
linux
kernel
udmabuf
privilege escalation
validation
user-supplied data
memory access
array
vulnerability
arbitrary code

0.001 Low

EPSS

Percentile

39.6%

A flaw was found in the Linux kernel’s udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.