Vulnerabilities > CVE-2023-4394 - Use After Free vulnerability in Linux Kernel
Attack vector
LOCAL Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
NONE Availability impact
HIGH Summary
A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- https://access.redhat.com/security/cve/CVE-2023-4394
- https://access.redhat.com/security/cve/CVE-2023-4394
- https://bugzilla.redhat.com/show_bug.cgi?id=2219263
- https://bugzilla.redhat.com/show_bug.cgi?id=2219263
- https://patchwork.kernel.org/project/linux-btrfs/patch/[email protected]/
- https://patchwork.kernel.org/project/linux-btrfs/patch/[email protected]/