CVE-2023-0030
published 2023-03-08CVE-2023-0030: A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail…
PriorityP341high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.22%
12.9th percentile
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.2.6-1 (bookworm) | linux 5.2.6-1 (bookworm) |
| linux | linux_kernel | < 5.0 | 5.0 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jm67-cprv-v6wx: A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function t
ghsa_unreviewed·2023-07-06
CVE-2023-0030 [HIGH] CWE-416 GHSA-jm67-cprv-v6wx: A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function t
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
OSV
CVE-2023-0030: A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function t
osv·2023-03-08·CVSS 7.8
CVE-2023-0030 [HIGH] CVE-2023-0030: A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function t
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Debian
CVE-2023-0030: linux - A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a us...
vendor_debian·2023·CVSS 7.8
CVE-2023-0030 [HIGH] CVE-2023-0030: linux - A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a us...
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Scope: local
bookworm: resolved (fixed in 5.2.6-1)
bullseye: resolved (fixed in 5.2.6-1)
forky: resolved (fixed in 5.2.6-1)
sid: resolved (fixed in 5.2.6-1)
trixie: resolved (fixed in 5.2.6-1)
Red Hat
kernel: Use after Free in nvkm_vmm_pfn_map
vendor_redhat·2018-12-11·CVSS 7.8
CVE-2023-0030 [HIGH] CWE-416 kernel: Use after Free in nvkm_vmm_pfn_map
kernel: Use after Free in nvkm_vmm_pfn_map
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Statement: This issue is rated Moderate due to complexity, and a denial of service is only possible with the known attack scenario.
The Red Hat Enterprise Linux not affected, because commit 9211092b378 "[drm] drm: Main backport to rebase from 4.18
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://bugzilla.redhat.com/show_bug.cgi?id=2157270https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10https://security.netapp.com/advisory/ntap-20230413-0010/https://bugzilla.redhat.com/show_bug.cgi?id=2157270https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10https://security.netapp.com/advisory/ntap-20230413-0010/https://bugzilla.redhat.com/show_bug.cgi?id=2157270
2023-03-08
Published