Published: 11/07/2023 Updated: 07/11/2023

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 0

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 6.4
linux linux kernel
redhat enterprise linux 7.0
redhat enterprise linux 6.0
redhat enterprise linux 8.0
fedoraproject fedora 37
redhat enterprise linux 9.0
fedoraproject fedora 38

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2023-2124 Kyle Zeng, Akshay Ajayan and Fish Wang discovered that missing metadata validation may result in denial of service or potential privilege escalation if a corrupted XFS disk imag ...

Description This CVE is under investigation by Red Hat Product Security ...

CVE-2023-3269: Linux kernel privilege escalation vulnerability

StackRot (CVE-2023-3269): Linux kernel privilege escalation vulnerability (GitHub-CI-verified exploit) A flaw was found in the handling of stack expansion in the Linux kernel 61 through 64, aka "Stack Rot" The maple tree, responsible for managing virtual memory areas, can undergo node replacement without properly acquiring the MM write lock, leading to use-after-f

A curated list of my GitHub stars! Generated by starred

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents Adblock Filter List Awk Brainfuck C C# C++ CMake CSS Clojure CoffeeScript Common Lisp Coq Crystal D2 Dart Dockerfile EJS Elixir Emacs Lisp F# Go HCL HTML Haskell Haxe Java JavaScript Jinja Jsonnet Julia Jupyter Notebook Kotlin Lean Lua MDX Makefile Markdown Mathematica Mustache Nim Nix OCaml Obj

CWE-416 https://access.redhat.com/security/cve/CVE-2023-3269 https://bugzilla.redhat.com/show_bug.cgi?id=2215268 https://www.openwall.com/lists/oss-security/2023/07/05/1 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/http://www.openwall.com/lists/oss-security/2023/07/28/1 http://seclists.org/fulldisclosure/2023/Jul/43 http://www.openwall.com/lists/oss-security/2023/08/25/1 http://www.openwall.com/lists/oss-security/2023/08/25/4 https://security.netapp.com/advisory/ntap-20230908-0001/https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5448 https://github.com/lrh2000/StackRot

CVE-2023-3269

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect