跳转到帖子

Oracle Linux: CVE-2023-3141: ELSA-2023-12688: Unbreakable Enterprise kernel security update (IMPORTANT) (Multiple Advisories)

recommended_posts

发布于
  • Members

Oracle Linux: CVE-2023-3141: ELSA-2023-12688: Unbreakable Enterprise kernel security update (IMPORTANT) (Multiple Advisories)

Severity
6
CVSS
(AV:L/AC:H/Au:M/C:C/I:C/A:C)
Published
03/07/2023
Created
08/02/2023
Added
08/01/2023
Modified
01/23/2025

Description

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak. A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This issue may allow a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.

Solution(s)

  • oracle-linux-upgrade-kernel
  • oracle-linux-upgrade-kernel-uek

References

  • https://attackerkb.com/topics/cve-2023-3141
  • CVE - 2023-3141
  • ELSA-2023-12688
  • ELSA-2023-7077
  • ELSA-2023-6583
  • 查看数 718
  • 已创建
  • 最后回复