CVE-2023-22301

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 3.1.5

Description The kernel subsystem hmdfs has an arbitrary memory accessing issue, allowing network attackers to launch a remote attack and obtain kernel memory data of the target system.

Recommendations For versions prior to 3.1.5, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the hmdfs kernel subsystem to minimize the risk of exploitation.