CVE-2023-1195

2023-03-0700:00:00

ubuntu.com

use-after-free

reconn_set_ipaddr_from_hostname

linux kernel

server hostname

invalid pointer

cve-2023-1195

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in
fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to
set the free pointer server->hostname to NULL, leading to an invalid
pointer request.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-99.112UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-67.74UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-38.39UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1065.68UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1031.35UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1022.23UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1002.2UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1031.35~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1065.68~18.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-99.112	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-67.74	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-38.39	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1065.68	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1031.35	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1022.23	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1002.2	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1031.35~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1065.68~18.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< any	UNKNOWN