CVE-2023-2008 — Improper Validation of Array Index in Kernel
Severity
7.8HIGHNVD
EPSS
1.5%
top 18.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 14
Latest updateSep 15
Description
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages9 packages
Patches
🔴Vulnerability Details
3💥Exploits & PoCs
2Nuclei▶
Modoboa < 2.1.0 - Improper Authorization
📋Vendor Advisories
4Red Hat▶
kernel: udmabuf: improper validation of array index leading to local privilege escalation↗2023-04-13
Microsoft▶
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data which can resu↗2023-04-11
Debian▶
CVE-2023-2008: linux - A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw ...↗2023