CVE-2023-40791

The CVE-2023-40791 issue is in the Linux kernel’s extract_user_to_sg (lib/scatterlist.c), where pages may not be properly unpinned in a specific scenario, evidenced by a WARNING for try_grab_page. The connected Nessus entry corroborates affected code and versions: Linux kernel before 6.4.12. This...