CVE-2023-37454

2023-07-0600:00:00

ubuntu.com

cve-2023-37454

linux kernel

udf filesystem

use-after-free

write operation

bugzilla

sbeattie

cengizcan

syzkaller

mounted loopback device

fuzzer

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

9.8%

JSON

An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF
filesystem image causes a use-after-free write operation in the
udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the
suse.com reference has a different perspective about this.

Bugs

Notes

Author	Note
sbeattie	according to upstream, this is syzkaller corrupting a mounted loopback device by writing directly to the device while it’s mounted. Upstream is unlikely to fix this, other than by having the fuzzer not do that.
cengizcan	CVE disputed September 2023. Won’t fix.