WID-SEC-W-2023-0551

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

view advisory published 2023-03-01

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2023-1079USmedium6.8—
A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as…
CVE-2023-1077UShigh7.0—
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy e…
CVE-2023-1076USmedium5.5—
A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often corr…
CVE-2023-1075USlow3.3—
A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last by…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan