CVE-2023-23039

CVSS V2 None CVSS V3 None
Description
An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open(), aka a race condition between vcc_open() and vcc_remove().
Overview
  • CVE ID
  • CVE-2023-23039
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-22T17:15:11
  • Last Modified Date
  • 2023-03-06T17:05:51
Weakness Enumerations
CWE URL
CWE-362 http://cwe.mitre.org/data/definitions/362.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 6.2.0
cpe:2.3:o:linux:linux_kernel:6.2.0:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:o:linux:linux_kernel:6.2.0:rc2:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://lkml.org/lkml/2023/1/1/169 Mailing List Patch
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-23039
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23039
History
Created Old Value New Value Data Type Notes
2023-04-17 08:04:40 Added to TrackCVE
2023-04-17 08:04:43 Weakness Enumeration new