{"id":"CVE-2023-4611","title":"A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel","summary":"A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lea…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.4, < 6.4.8","linux_kernel = 6.5"],"patched":["linux_kernel 6.4.8"],"published":"2023-08-29","updated":"2026-09-11","sourceUpdated":"2026-09-11T16:15:24.103","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-4611","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-4611","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227244","label":"secalert@redhat.com"},{"url":"https://www.spinics.net/lists/stable-commits/msg310136.html","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2023-4611","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227244","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.spinics.net/lists/stable-commits/msg310136.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4611.json"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4611"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4611"}],"tags":["nvd","csaf","vex","red-hat"],"epss":0.00269,"epssPercentile":0.19295,"ingestedAt":"2026-09-11T16:45:47.841Z","slug":"CVE-2023-4611","body":"## Overview\n\nA use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak.\n\n## Affected\n\n- `linux_kernel >= 6.4, < 6.4.8`\n- `linux_kernel = 6.5`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.4.8`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-11 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4611.json)","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}