SB2023082956 - Use after free in Linux kernel
Published: August 29, 2023
Security Bulletin ID
SB2023082956
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use after free (CVE-ID: CVE-2023-4611)
The vulnerability allows a local user to read data or crash the application.
A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak.
Remediation
Install update from vendor's website.