Description
A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a kernel
Default version status: affected
Red Hat Red Hat Enterprise Linux 6
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 7
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 7
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: unaffected
Fedora Fedora
Default version status: affected
References
- https://access.redhat.com/security/cve/CVE-2023-3269 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2215268 ↗
- https://www.openwall.com/lists/oss-security/2023/07/05/1 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/ ↗
- http://seclists.org/fulldisclosure/2023/Jul/43 ↗
- http://www.openwall.com/lists/oss-security/2023/07/28/1 ↗
- http://www.openwall.com/lists/oss-security/2023/08/25/1 ↗
- http://www.openwall.com/lists/oss-security/2023/08/25/4 ↗
- https://security.netapp.com/advisory/ntap-20230908-0001/ ↗