CVE-2023-4389 — Double Free in Kernel

CWE-415 — Double FreeCWE-416 — Use After FreeCWE-200 — Sensitive Information ExposureCWE-312 — Cleartext Storage of Sensitive InfoCWE-359 — Exposure of Private Personal Information to an Unauthorized Actor7 documents7 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 95.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Linux KernelNautobotDebian Linux+1 more
Timeline
PublishedAug 16
Latest updateOct 24

Description

A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages5 packages

▶NVDlinux/linux_kernel5.7 — 5.10.112+2
▶Debianlinux/linux_kernel< 5.10.113-1+3
▶debiandebian/linux< linux 5.17.6-1 (bookworm)
▶PyPInautobot/nautobot2.0.0 — 2.0.3

Patches

Patch: patchwork.kernel.org ↗Patch: patchwork.kernel.org ↗

🔴Vulnerability Details

3
GHSA
Nautobot vulnerable to exposure of hashed user passwords via REST API↗2023-10-24
▶
GHSA
GHSA-4g3m-89jh-2mrf: A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io↗2023-08-16
▶
OSV
CVE-2023-4389: A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io↗2023-08-16
▶

📋Vendor Advisories

3
Microsoft
Kernel: btrfs: double free in btrfs_get_root_ref()↗2023-08-08
▶
Debian
CVE-2023-4389: linux - A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesy...↗2023
▶
Red Hat
kernel: btrfs: double free in btrfs_get_root_ref()↗2022-03-24
▶
CVE-2023-4389 — Double Free in Linux Kernel | cvebase