Closed mend-bolt-for-github[bot] closed 6 months ago
The Linux Kernel
Library home page: https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/?wsslib=linux
Found in HEAD commit: d55707ea8d287fb01efec0c2d91aa368903294f8
Found in base branch: master
/lib/scatterlist.c
extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page.
Publish Date: 2023-10-16
URL: CVE-2023-40791
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: High - Availability Impact: High
Type: Upgrade version
Origin: https://www.linuxkernelcves.com/cves/CVE-2023-40791
Release Date: 2023-10-16
Fix Resolution: v6.4.12
Step up your Open Source Security Game with Mend here
CVE-2023-40791 - Medium Severity Vulnerability
The Linux Kernel
Library home page: https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/?wsslib=linux
Found in HEAD commit: d55707ea8d287fb01efec0c2d91aa368903294f8
Found in base branch: master
extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page.
Publish Date: 2023-10-16
URL: CVE-2023-40791
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: High - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://www.linuxkernelcves.com/cves/CVE-2023-40791
Release Date: 2023-10-16
Fix Resolution: v6.4.12
Step up your Open Source Security Game with Mend here