CVE-2023-1670 — Use After Free in Kernel

CWE-416 — Use After Free34 documents9 sources
Severity
7.8HIGHNVD
OSV5.5
EPSS
0.0%
top 86.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Linux KernelDebian LinuxGoogle Chrome Chrome+6 more
Timeline
PublishedMar 30
Latest updateFeb 13

Description

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages12 packages

▶NVDlinux/linux_kernel2.6.18 — 4.14.312+6
▶Debianlinux/linux_kernel< 5.10.178-1+3
▶Ubuntulinux/linux_kernel< 5.4.0-152.169+3
▶CVEListV5linux/linux_kernelLinux kernel 6.3-rc4
▶debiandebian/linux< linux 6.1.20-2 (bookworm)

🔴Vulnerability Details

14
OSV
linux-iot vulnerabilities↗2023-07-27
▶
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities↗2023-07-26
▶
OSV
linux-xilinx-zynqmp vulnerabilities↗2023-07-12
▶
OSV
linux-azure-fde vulnerabilities↗2023-07-12
▶
OSV
linux-intel-iotg vulnerabilities↗2023-07-06
▶

📋Vendor Advisories

19
CISA ICS
Siemens SCALANCE W700↗2025-02-13
▶
Chrome
Stable Channel Update for Desktop: CVE-2024-1669↗2024-02-20
▶
CISA ICS
Siemens SCALANCE XCM-/XRM-300↗2024-02-15
▶
Ubuntu
Linux kernel (IoT) vulnerabilities↗2023-07-27
▶
Ubuntu
Linux kernel vulnerabilities↗2023-07-26
▶
CVE-2023-1670 — Use After Free in Linux Kernel | cvebase