Risk | Low |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2023-52445 |
CWE-ID | CWE-416 |
Exploitation vector | Local |
Public exploit | N/A |
Vulnerable software Subscribe |
Linux kernel Operating systems & Components / Operating system |
Vendor |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU87745
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52445
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in pvrusb2. A local user can execute arbitrary code with elevated privileges.
Install updates from vendor's website.
Vulnerable software versionsLinux kernel: before 4.19.306
External linkshttp://git.kernel.org/stable/c/ec36c134dd020d28e312c2f1766f85525e747aab
http://git.kernel.org/stable/c/47aa8fcd5e8b5563af4042a00f25ba89bef8f33d
http://git.kernel.org/stable/c/3233d8bf7893550045682192cb227af7fa3defeb
http://git.kernel.org/stable/c/ec3634ebe23fc3c44ebc67c6d25917300bc68c08
http://git.kernel.org/stable/c/30773ea47d41773f9611ffb4ebc9bda9d19a9e7e
http://git.kernel.org/stable/c/2cf0005d315549b8d2b940ff96a66c2a889aa795
http://git.kernel.org/stable/c/437b5f57732bb4cc32cc9f8895d2010ee9ff521c
http://git.kernel.org/stable/c/ded85b0c0edd8f45fec88783d7555a5b982449c1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.