Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/06/2023 Updated: 06/07/2023

CVSS v3 Base Score: 4.7 | Impact Score: 3.6 | Exploitability Score: 1

VMScore: 0

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 5.18
linux linux kernel

DescriptionA flaw was found in the MCTP protocol in the Linux kernel The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches However, a running routine may be unaware of this and cause the use-after-free of the mdev-&gt;addrs object, potentially leading to a denial of serviceA flaw was found in t ...

CWE-416 https://github.com/torvalds/linux/commit/b561275d633bcd8e0e8055ab86f1a13df75a0269 https://bugzilla.redhat.com/show_bug.cgi?id=2217915 http://www.openwall.com/lists/oss-security/2023/07/02/1 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2023-3439

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-3439

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect