CVE-2023-26607High· 7.1▾ MidnightPoC availableIn the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 39.1 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.6%
1 GitHub repo (last check)
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
linux_kernel >= 2.6.12, < 4.9.334linux_kernel >= 4.10, < 4.14.300linux_kernel >= 4.15, < 4.19.267linux_kernel >= 4.20, < 5.4.225linux_kernel >= 5.5.0, < 5.10.156linux_kernel >= 5.11, < 5.15.80linux_kernel >= 5.16, < 6.0.10hci_baseboard_management_controller = h300shci_baseboard_management_controller = h410chci_baseboard_management_controller = h410shci_baseboard_management_controller = h500shci_baseboard_management_controller = h700sUpgrade past the affected range:
linux_kernel 6.0.10Connected by shared product, vendor, weakness, or advisory.
CVE-2023-32233High· 7.8In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory
CVE-2023-23559High· 7.8In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
CVE-2023-3141High· 7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel
CVE-2022-41222High· 7.0mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
CVE-2021-3506High· 7.1An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4
CVE-2023-39194Low· 3.2A flaw was found in the XFRM subsystem in the Linux kernel