CVE-2023-1476

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.

Score

CVSS 3.1 7.0 High

Status

Modified - secalert@redhat.com

Published

2023-11-03

Last modified

2025-02-27

Weaknesses

CWE-416

Affected products

• Linux Kernel (Linux)
• Enterprise Linux (Redhat)
• Enterprise Linux Eus (Redhat)
• Enterprise Linux For Power Little Endian (Redhat)
• Enterprise Linux For Power Little Endian Eus (Redhat)
• Enterprise Linux Server Tus (Redhat)

References

• https://access.redhat.com/errata/RHSA-2023:1659
• https://access.redhat.com/security/cve/CVE-2023-1476
• https://bugzilla.redhat.com/show_bug.cgi?id=2176035
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2