← CVE Intelligence

CVE-2023-3567

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race PUBLISHED

Description (CNA)

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-553.rt7.342.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-553.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.18.0-372.87.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.43.1.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-427.13.1.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-427.13.1.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:5.14.0-70.85.1.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:5.14.0-70.85.1.rt21.156.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.48.1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.48.1.rt14.333.el9_2 before *
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.18.0-372.87.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.