CVE-2023-5178High· 8.8▾ MidnightPoC availableA use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and dou…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 48.4 · likelihood 1.9 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
9.5%
1 GitHub repo (last check)
A use-after-free vulnerability was found in drivers/nvme/target/tcp.cinnvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.
linux_kernel >= 5.0, < 5.4.260linux_kernel >= 5.5, < 5.10.199linux_kernel >= 5.11, < 5.15.137linux_kernel >= 5.16, < 6.1.60linux_kernel >= 6.2, < 6.5.9enterprise_linux = 8.0enterprise_linux = 9.0active_iq_unified_managersolidfire_&_hci_management_nodesolidfire_&_hci_storage_nodeUpgrade past the affected range:
linux_kernel 6.5.9Connected by shared product, vendor, weakness, or advisory.
CVE-2023-3141High· 7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel
CVE-2022-41222High· 7.0mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
CVE-2022-3649Low· 3.1A vulnerability was found in Linux Kernel
CVE-2023-3338Medium· 6.5A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol
CVE-2022-36946High· 7.5nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_p…
CVE-2024-1086High· 7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, …