In the Linux kernel, the following vulnerability has been resolved:
nbd: fix uaf in nbd_open
Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and
blk_cleanup_disk") cleans up disk by blk_cleanup_disk() and it won't set
disk->private_data as NULL as before. UAF may be triggered in nbd_open()
if someone tries to open nbd device right after nbd_put() since nbd has
been free in nbd_dev_remove().
Fix this by implementing ->free_disk and free private data in it.
References
Configurations
Configuration 1 (hide)
|
History
15 Jan 2025, 18:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CWE | CWE-416 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/327462725b0f759f093788dfbcb2f1fd132f956b - Patch | |
| References | () https://git.kernel.org/stable/c/4e9b3ec84dc97909876641dad14e0a2300d6c2a3 - Patch | |
| References | () https://git.kernel.org/stable/c/56bd7901b5e9dbc9112036ea615ebcba1565fafe - Patch | |
| References | () https://git.kernel.org/stable/c/879947f4180bc6e83af64eb0515e0cf57fce15db - Patch |
Information
Published : 2024-05-21 16:15
Updated : 2025-01-15 18:14
NVD link : CVE-2023-52837
Mitre link : CVE-2023-52837
CVE.ORG link : CVE-2023-52837
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free