QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-2007

Back to search

CVE-2023-2007

Published: Apr 24, 2023

Modified: Aug 2, 2024

PUBLISHED

Description

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

VendorProductVersions

n/a

Linux kernel's DPT I2O Controller driver

affected
Fixed in kernel v6.0-rc1

Weaknesses (CWE)

CWE-367

References

DSA-5480
vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now