Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2023-4611

Use after free race between mbind() and vma-locked page fault

Description

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Kernel

  • 6.5-rc4unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Fedora Fedora

Default version status: unaffected

References