QwikSec

Security Database

CVE

CWE

Training

CVE-2023-3269

Published: Jul 11, 2023

Modified: Mar 5, 2025

PUBLISHED

CVSS v3.1

7.8

HIGH

Description

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.

Vendor	Product	Versions
n/a	kernel	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions
Fedora	Fedora	All versions

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

References

https://access.redhat.com/security/cve/CVE-2023-3269

vdb-entry

x_refsource_REDHAT

issue-tracking

x_refsource_REDHAT

https://www.openwall.com/lists/oss-security/2023/07/05/1

https://lists.fedoraproject.org/archives/list/[email protected]/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/

http://seclists.org/fulldisclosure/2023/Jul/43

http://www.openwall.com/lists/oss-security/2023/07/28/1

http://www.openwall.com/lists/oss-security/2023/08/25/1

http://www.openwall.com/lists/oss-security/2023/08/25/4

https://security.netapp.com/advisory/ntap-20230908-0001/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.