CVE-2023-2007

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue results from the lack of proper locking when performing operations on an object within the DPT I2O Controller driver. This can be leveraged by an attacker, in conjunction with other vulnerabilities, to escalate privileges and execute arbitrary code in the context of the kernel. The vulnerability is related to the virt to bus() and bus to virt() functions of the dpt i2o driver in Linux operating systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.