CVE-2023-35826 — Race Condition in Kernel

CWE-362 — Race ConditionCWE-416 — Use After Free7 documents7 sources
Severity
7.0HIGHNVD
EPSS
0.0%
top 94.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Linux KernelDebian LinuxMsrc Cbl2 Hyperv-daemons 5.15.158.1-1 ON CBL Mariner 2.0+6 more
Timeline
PublishedJun 18
Latest updateAug 11

Description

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages10 packages

▶NVDlinux/linux_kernel5.18 — 6.1.28+2
▶Debianlinux/linux_kernel< 6.1.37-1+2
▶debiandebian/linux< linux 6.1.37-1 (bookworm)

Patches

Patch: lore.kernel.org ↗Patch: lore.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-wgpp-pf5c-x229: An issue was discovered in the Linux kernel before 6↗2023-06-19
▶
OSV
CVE-2023-35826: An issue was discovered in the Linux kernel before 6↗2023-06-18
▶

📋Vendor Advisories

4
Ubuntu
Linux kernel vulnerabilities↗2023-08-11
▶
Red Hat
kernel: cedrus: race condition leading to use-after-free in cedrus_remove()↗2023-06-19
▶
Microsoft
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.↗2023-06-13
▶
Debian
CVE-2023-35826: linux - An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was f...↗2023
▶
CVE-2023-35826 — Race Condition in Linux Kernel | cvebase