Lucene search

PRIOn knowledge basePRION:CVE-2023-3141

HistoryJun 09, 2023 - 8:15 p.m.

Design/Logic Flaw

2023-06-0920:15:00

PRIOn knowledge base

www.prio-n.com

design logic flaw

use-after-free

r592_remove

linux kernel

media access

local attacker

crash

system

device disconnect

kernel information leak

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

6.5 Medium

AI Score

Confidence

High

3.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.

CPENameOperatorVersion
debian_linuxeq10.0
linux_kernelge4.20
linux_kernellt5.4.244
linux_kernelge4.15
linux_kernellt4.19.284
linux_kernelge6.2
linux_kernellt6.3.4
linux_kernelge5.16
linux_kernellt6.1.30
linux_kernelge5.11

Name	Operator	Version
debian_linux	eq	10.0
linux_kernel	ge	4.20
linux_kernel	lt	5.4.244
linux_kernel	ge	4.15
linux_kernel	lt	4.19.284
linux_kernel	ge	6.2
linux_kernel	lt	6.3.4
linux_kernel	ge	5.16
linux_kernel	lt	6.1.30
linux_kernel	ge	5.11