CVE-2023-52795

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52795
In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix use after free in vhost_vdpa_probe() The put_device() calls vhost_vdpa_release_dev() which calls ida_simple_remove() and frees "v". So this call to ida_simple_remove() is a use after free and a double free.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/ae8ea4e200675a940c365b496ef8e3fb4123601c Patch
https://git.kernel.org/stable/c/bf04132cd64ccde4e9e9765d489c83fe83c09b7f Patch
https://git.kernel.org/stable/c/c0f8b8fb7df9d1a38652eb5aa817afccd3c56111 Patch
https://git.kernel.org/stable/c/e07754e0a1ea2d63fb29574253d1fd7405607343 Patch
https://git.kernel.org/stable/c/ae8ea4e200675a940c365b496ef8e3fb4123601c Patch
https://git.kernel.org/stable/c/bf04132cd64ccde4e9e9765d489c83fe83c09b7f Patch
https://git.kernel.org/stable/c/c0f8b8fb7df9d1a38652eb5aa817afccd3c56111 Patch
https://git.kernel.org/stable/c/e07754e0a1ea2d63fb29574253d1fd7405607343 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
History

10 Jan 2025, 17:59

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE CWE-416
CWE-415
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/ae8ea4e200675a940c365b496ef8e3fb4123601c - () https://git.kernel.org/stable/c/ae8ea4e200675a940c365b496ef8e3fb4123601c - Patch
References () https://git.kernel.org/stable/c/bf04132cd64ccde4e9e9765d489c83fe83c09b7f - () https://git.kernel.org/stable/c/bf04132cd64ccde4e9e9765d489c83fe83c09b7f - Patch
References () https://git.kernel.org/stable/c/c0f8b8fb7df9d1a38652eb5aa817afccd3c56111 - () https://git.kernel.org/stable/c/c0f8b8fb7df9d1a38652eb5aa817afccd3c56111 - Patch
References () https://git.kernel.org/stable/c/e07754e0a1ea2d63fb29574253d1fd7405607343 - () https://git.kernel.org/stable/c/e07754e0a1ea2d63fb29574253d1fd7405607343 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: vhost-vdpa: corrige el use after free en vhost_vdpa_probe(). El put_device() llama a vhost_vdpa_release_dev() que llama a ida_simple_remove() y libera "v". Entonces esta llamada a ida_simple_remove() es un use after free y double free.
References () https://git.kernel.org/stable/c/ae8ea4e200675a940c365b496ef8e3fb4123601c - () https://git.kernel.org/stable/c/ae8ea4e200675a940c365b496ef8e3fb4123601c -
References () https://git.kernel.org/stable/c/bf04132cd64ccde4e9e9765d489c83fe83c09b7f - () https://git.kernel.org/stable/c/bf04132cd64ccde4e9e9765d489c83fe83c09b7f -
References () https://git.kernel.org/stable/c/c0f8b8fb7df9d1a38652eb5aa817afccd3c56111 - () https://git.kernel.org/stable/c/c0f8b8fb7df9d1a38652eb5aa817afccd3c56111 -
References () https://git.kernel.org/stable/c/e07754e0a1ea2d63fb29574253d1fd7405607343 - () https://git.kernel.org/stable/c/e07754e0a1ea2d63fb29574253d1fd7405607343 -

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-01-10 17:59

NVD link : CVE-2023-52795

Mitre link : CVE-2023-52795

CVE.ORG link : CVE-2023-52795

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free

CWE-416

Use After Free