CVE-2023-7122

kernel: slab-use-after-free in iommufd_test

Published n/a CVSS 3.1 · 6.2 Medium EPSS n/a KEV · Not listed

Description

A slab-use-after-free vulnerability was found in the Linux kernel 6.6. Invoking the iommufd_test call in the iommufd driver can result in a crash and kernel panic.

Affected Products

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2023-7122
https://www.cve.org/CVERecord?id=CVE-2023-7122

History

Oct 22, 2024 2:15 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A slab-use-after-free vulnerability was found in the Linux kernel 6.6. Invoking the iommufd_test call in the iommufd driver can result in a crash and kernel panic.
Title		kernel: slab-use-after-free in iommufd_test
Weaknesses		CWE-416
References		https://nvd.nist.gov/vuln/detail/CVE-2023-7122 https://www.cve.org/CVERecord?id=CVE-2023-7122
Metrics	threat_severity `None`	cvssV3_1 `{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`