Lucene search
Veracode Vulnerability DatabaseVERACODE:39553HistoryMar 06, 2023 - 8:47 p.m.
Privilege Escalation
2023-03-0620:47:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
linux
kernel
privilege escalation
alsa pcm
vulnerability
use-after-free
ring0
EPSS
0.001
Percentile
35.5%
Linux kernel is vulnerable to Privilege Escalation. The vulnerability exists in the ALSA PCM package because of the missing locks in the SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32, which leads to use-after-free, resulting in gaining access to ring0 from the system user
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-0266
git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.10/alsa-pcm-move-rwsem-lock-inside-snd_ctl_elem_read-to-prevent-uaf.patch?id=72783cf35e6c55bca84c4bb7b776c58152856fd4
github.com/torvalds/linux/commit/56b88b50565cd8b946a2d00b0c83927b7ebb055e
github.com/torvalds/linux/commit/becf9e5d553c2389d857a3c178ce80fdb34a02e1
lists.debian.org/debian-lts-announce/2023/05/msg00006.html
Related
osv
osv
Missing locks in SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 compat code causing UAF used in the wild
2023-05-01 00:00:00
Important: kernel-rt security and bug fix update
2023-04-06 15:23:50
Important: kernel security, bug fix, and enhancement update
2023-04-06 15:23:59
cbl_mariner
cbl_mariner
CVE-2023-0266 affecting package kernel for versions less than 5.15.92.1-1
2023-02-14 20:21:22
CVE-2023-0266 affecting package hyperv-daemons 5.10.167.1-1
2023-03-02 04:18:44
debiancve
debiancve
CVE-2023-0266
2023-01-30 14:15:10
redhatcve
redhatcve
CVE-2023-0266
2023-01-23 11:07:23
nessus
nessus
RHEL 8 : kpatch-patch (RHSA-2023:1590)
2023-04-05 00:00:00
CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-0266)
2023-03-20 00:00:00
RHEL 8 : kernel (RHSA-2023:1588)
2023-04-05 00:00:00
redhat
redhat
(RHSA-2023:1588) Important: kernel security update
2023-04-04 08:53:58
(RHSA-2023:1590) Important: kpatch-patch security update
2023-04-04 08:54:00
(RHSA-2023:1662) Important: kpatch-patch security update
2023-04-05 13:22:45
prion
prion
Design/Logic Flaw
2023-01-30 14:15:00
cvelist
cvelist
CVE-2023-0266 Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
2023-01-30 13:09:32
attackerkb
attackerkb
CVE-2023-0266
2023-01-30 00:00:00
cve
cve
CVE-2023-0266
2023-01-30 14:15:10
ubuntucve
ubuntucve
CVE-2023-0266
2023-01-30 00:00:00
githubexploit
githubexploit
Exploit for Use After Free in Linux Linux Kernel
2024-03-10 04:41:34
nvd
nvd
CVE-2023-0266
2023-01-30 14:15:10
f5
f5
K000133644 : Linux kernel vulnerability CVE-2023-0266
2023-04-24 00:00:00
cisa_kev
cisa_kev
Linux Kernel Use-After-Free Vulnerability
2023-03-30 00:00:00
almalinux
almalinux
Important: kernel-rt security and bug fix update
2023-03-27 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-03-27 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-04-04 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2023-04-06 15:23:50
kernel security, bug fix, and enhancement update
2023-04-06 15:23:59
kernel-rt security and bug fix update
2023-04-26 15:28:18
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2023-03-28 00:00:00
kernel security, bug fix, and enhancement update
2023-04-05 00:00:00
Unbreakable Enterprise kernel security update
2023-03-16 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0394-1)
2023-02-14 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:0394-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:0433-1)
2024-03-04 00:00:00
googleprojectzero
googleprojectzero
Analyzing a Modern In-the-wild Android Exploit
2023-09-19 00:00:00
redos
redos
ROS-20230915-10
2023-09-15 00:00:00
thn
thn
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-03-23 00:00:00
Linux kernel (HWE) vulnerabilities
2023-03-28 00:00:00
Linux kernel vulnerabilities
2023-03-28 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2023-01-22 23:39:23
Updated kernel-linus packages fix security vulnerabilities
2023-01-22 23:39:23
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0332
2023-02-14 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0527
2023-02-07 00:00:00
debian
debian
[SECURITY] [DSA 5324-1] linux security update
2023-01-23 20:11:44
[SECURITY] [DLA 3349-1] linux-5.10 security update
2023-03-02 22:05:14
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-04-26 15:33:20