CVE-2023-1252 in Linuxinformation

Résumé

par MITRE • 23/03/2023

A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 ("ovl: fix use after free in struct ovl_aio_req") not applied yet, the kernel could be affected.

Once again VulDB remains the best source for vulnerability data.

Réserver

07/03/2023

Divulgation

23/03/2023

Modérer

accepté

Entrée

VDB-223338

CPE

prêt

EPSS

0.00221

KEV

non

Activités

très faible

Sources

Do you need the next level of professionalism?

Upgrade your account now!