8.2high
CVE-2023-2008
Kernel: udmabuf: improper validation of array index leading to local privilege escalation
Published 3 y ago · modified 2 mo ago · JSON
CVSS
8.2
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
1.0%
percentile 63%
Public exploits
0
none known
Summary
A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 18 mo ago
Exploit prediction (EPSS)
1.01% probability of exploitation in the next 30 days, higher than 63% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 8.2 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| CISA ADP | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.2 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Linux kernel
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat Enterprise Linux 8
Classification
- Weakness
- CWE-129 Improper Validation of Array Index
- Technology feeds
- Linux kernel (RSS, critical only)
References
- access.redhat.com /errata/RHSA-2022:7933 · vendor-advisory, x_refsource_REDHAT
- access.redhat.com /errata/RHSA-2022:8267 · vendor-advisory, x_refsource_REDHAT
- access.redhat.com /errata/RHSA-2023:3465 · vendor-advisory, x_refsource_REDHAT
- access.redhat.com /errata/RHSA-2023:3470 · vendor-advisory, x_refsource_REDHAT
- access.redhat.com /errata/RHSA-2023:3490 · vendor-advisory, x_refsource_REDHAT
- access.redhat.com /security/cve/CVE-2023-2008 · vdb-entry, x_refsource_REDHAT
- bugzilla.redhat.com /show_bug.cgi?id=2186862 · issue-tracking, x_refsource_REDHAT, x_transferred
- zerodayinitiative.com /advisories/ZDI-23-441/ · x_transferred
- github.com /torvalds/linux/commit/05b252cccb2e5c3f56119d25de684b4f810ba4 · x_transferred
- security.netapp.com /advisory/ntap-20230517-0007/ · x_transferred
Sources
- CVE List: CVE-2023-2008
- NVD: CVE-2023-2008
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.