Red Hat: CVE-2023-1652: Kernel: use-after-free in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (Multiple Advisories)

Red Hat: CVE-2023-1652: Kernel: use-after-free in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (Multiple Advisories)

Severity

6

CVSS

(AV:L/AC:L/Au:S/C:C/I:N/A:C)

Published

03/29/2023

Created

11/09/2023

Added

11/08/2023

Modified

01/28/2025

Description

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.

Solution(s)

• redhat-upgrade-kernel
• redhat-upgrade-kernel-rt

References

• CVE-2023-1652
• RHSA-2023:6583