DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
view advisory published 2023-03-19
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-48424US | high7.8 | — | ||
In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur. | ||||
| CVE-2022-48423US | high7.8 | — | ||
In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur. | ||||
02
references
External citations — patches, advisories, analysis.
- Github Security Advisory GHSA-V3FG-QXXF-34W3 vom 2023-03-19external
- Github Security Advisory GHSA-rqpf-mw6m-jx7p vom 2023-03-19external
- Ubuntu Security Notice USN-5982-1 vom 2023-03-28external
- Ubuntu Security Notice USN-6004-1 vom 2023-04-11external
- Ubuntu Security Notice USN-6079-1 vom 2023-05-16external
- Ubuntu Security Notice USN-6091-1 vom 2023-05-18external
- Ubuntu Security Notice USN-6096-1 vom 2023-05-23external
- WID-SEC-W-2023-0686 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan