PT-2023-3516
CVE-2023-3090
·
تاريخ النشر
2023-05-10
·
تاريخ التحديث
2026-10-18
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing
skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG IPVLAN is enabled.Recommendations
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾