CVE-2023-1249

A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 ("coredump: Use the vma snapshot in fill_files_note") not applied yet, then kernel could be affected.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2023-03-23

Last modified

2025-03-19

Weaknesses

CWE-416

Affected products

• Linux Kernel (Linux)

References

• http://packetstormsecurity.com/files/171912/CentOS-Stream-9-Missing-Kernel-Security-Fix.html
• https://patchwork.kernel.org/project/linux-fsdevel/patch/87iltzn3nd.fsf_-_%40email.froward.int.ebiederm.org/