CVE-2023-3439 — Use After Free in Linux

CWE-416 — Use After Free10 documents7 sources
Severity
4.7MEDIUMNVD
OSV7.8
EPSS
0.0%
top 99.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Linux KernelDebian LinuxMsrc Cbl2 Hyperv-daemons 5.15.126.1-1 ON CBL Mariner 2.0+6 more
Timeline
PublishedJun 28
Latest updateJul 26

Description

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6

Affected Packages11 packages

▶Debianlinux/linux_kernel< 5.17.6-1+2
▶Ubuntulinux/linux_kernel< 5.15.0-78.85
▶NVDlinux/linux_kernel5.15 — 5.17+1
▶debiandebian/linux< linux 5.17.6-1 (bookworm)

Patches

Patch: www.openwall.com ↗Patch: bugzilla.redhat.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
linux-intel-iotg-5.15 vulnerabilities↗2023-07-26
▶
OSV
linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5↗2023-07-25
▶
OSV
CVE-2023-3439: A flaw was found in the MCTP protocol in the Linux kernel↗2023-06-28
▶
GHSA
GHSA-wh7q-2hgq-2xj7: A flaw was found in the MCTP protocol in the Linux kernel↗2023-06-28
▶

📋Vendor Advisories

5
Ubuntu
Linux kernel (Intel IoTG) vulnerabilities↗2023-07-26
▶
Ubuntu
Linux kernel vulnerabilities↗2023-07-25
▶
Red Hat
kernel: mctp: use-after-free read in mctp_local_output()↗2023-06-26
▶
Microsoft
A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However a running routine may be unaware of t↗2023-06-13
▶
Debian
CVE-2023-3439: linux - A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unr...↗2023
▶
CVE-2023-3439 — Use After Free in Debian Linux | cvebase