CVE-2023-52639— Linux kernel 安全漏洞
Possible ATT&CK Techniques 2AI
T1003 · OS Credential Dumping T1203 · Exploitation for Client ExecutionAffected Version Matrix 10
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | a3508fbe9dc6dd3bece0c7bf889cc085a011738c< 5df3b81a567eb565029563f26f374ae3803a1dfc | affected |
a3508fbe9dc6dd3bece0c7bf889cc085a011738c< f5572c0323cf8b4f1f0618178648a25b8fb8a380 | affected | ||
a3508fbe9dc6dd3bece0c7bf889cc085a011738c< 28bb27824f25f36e5f80229a358d66ee09244082 | affected | ||
a3508fbe9dc6dd3bece0c7bf889cc085a011738c< fe752331d4b361d43cfd0b89534b4b2176057c32 | affected | ||
4.8 | affected | ||
< 4.8 | unaffected | ||
6.1.82≤ 6.1.* | unaffected | ||
6.6.22≤ 6.6.* | unaffected | ||
| … +2 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2023-52639の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
KVM: s390: vsie: fix race during shadow creation
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap->private being zero in kvm_s390_vsie_gmap_notifier resulting in a crash. This is due to the fact that we add gmap->private == kvm after creation: static int acquire_gmap_shadow(struct kvm_vcpu *vcpu, struct vsie_page *vsie_page) { [...] gmap = gmap_shadow(vcpu->arch.gmap, asce, edat); if (IS_ERR(gmap)) return PTR_ERR(gmap); gmap->private = vcpu->kvm; Let children inherit the private field of the parent.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞。攻击者利用该漏洞导致程序崩溃。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2023-52639の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2023-52639のインテリジェンス情報
请登录查看更多情报信息。
CVE-2023-52639 其他参考 (4)
Same Patch Batch · Linux · 2024-04-03 · 94 CVEs total
| CVE-2024-26760 | 9.8 CRITICAL | scsi: target: pscsi: Fix bio_put() for error case |
| CVE-2024-26779 | 8.8 HIGH | wifi: mac80211: fix race condition on enabling fast-xmit |
| CVE-2024-26689 | 8.8 HIGH | ceph: prevent use-after-free in encode_cap_msg() |
| CVE-2024-26692 | 8.3 HIGH | smb: Fix regression in writes when non-standard maximum write size negotiated |
| CVE-2024-26736 | 8.1 HIGH | afs: Increase buffer size in afs_update_volume_status() |
| CVE-2024-26699 | 7.8 HIGH | drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr |
| CVE-2024-26739 | 7.8 HIGH | net/sched: act_mirred: don't override retval if we already lost the skb |
| CVE-2024-26762 | 7.8 HIGH | cxl/pci: Skip to handle RAS errors if CXL.mem device is detached |
| CVE-2024-26766 | 7.8 HIGH | IB/hfi1: Fix sdma.h tx->num_descs off-by-one error |
| CVE-2024-26772 | 7.8 HIGH | ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() |
| CVE-2024-26773 | 7.8 HIGH | ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() |
| CVE-2024-26748 | 7.8 HIGH | usb: cdns3: fix memory double free when handle zero packet |
| CVE-2024-26697 | 7.8 HIGH | nilfs2: fix data corruption in dsync block recovery for small block sizes |
| CVE-2024-26737 | 7.8 HIGH | bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel |
| CVE-2024-26718 | 7.8 HIGH | dm-crypt, dm-verity: disable tasklets |
| CVE-2024-26712 | 7.8 HIGH | powerpc/kasan: Fix addr error caused by page alignment |
| CVE-2023-52637 | 7.8 HIGH | can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) |
| CVE-2024-26706 | 7.8 HIGH | parisc: Fix random data corruption from exception handler |
| CVE-2024-26728 | 7.8 HIGH | drm/amd/display: fix null-pointer dereference on edid reading |
| CVE-2024-26704 | 7.8 HIGH | ext4: fix double-free of blocks due to wrong extents moved_len |
Showing 20 of 94 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-68428
KVM: x86/mmu: Fix use-after-free on vendor module reload - CVE-2026-68427
gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_ma - CVE-2026-68426
xfrm: fix stale skb->prev after async crypto steals a GSO se - CVE-2026-68425
IB/mad: Drop unmatched RMPP responses before reassembly - CVE-2026-68424
mtd: virt_concat: fix use-after-free in mtd_virt_concat_dest
同じベンダー: Linux
- CVE-2026-68428
KVM: x86/mmu: Fix use-after-free on vendor module reload - CVE-2026-68427
gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_ma - CVE-2026-68426
xfrm: fix stale skb->prev after async crypto steals a GSO se - CVE-2026-68425
IB/mad: Drop unmatched RMPP responses before reassembly - CVE-2026-68424
mtd: virt_concat: fix use-after-free in mtd_virt_concat_dest
V. CVE-2023-52639へのコメント
まだコメントはありません