2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"kernel","product":"Linux Kernel","repo":"https://git.kernel.org","vendor":"Linux","versions":[{"lessThan":"6.1","status":"affected","version":"5.19","versionType":"custom"}]}],"source":"cve-coordination@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"96F47CB7-A27F-4316-BBC3-15AE6B5A0734","versionEndExcluding":"6.0.11","versionStartIncluding":"5.19","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*","matchCriteriaId":"27227B35-932A-4035-B39F-6A455753C0D6","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*","matchCriteriaId":"489D20B9-166F-423D-8C48-A23D3026E33B","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*","matchCriteriaId":"A4AD592C-222D-4C6F-B176-8145A1A5AFEC","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*","matchCriteriaId":"8603654B-A8A9-4DEB-B0DD-C82E1C885749","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*","matchCriteriaId":"C855C933-F271-45E6-8E85-8D7CF2EF1BE6","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.\n\nBoth io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability.\n\nWe recommend upgrading past commit 9d94c04c0db024922e886c9fd429659f22f48ea4."}],"id":"CVE-2023-2236","lastModified":"2026-06-17T05:52:04.140","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2236","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-05T18:42:16.178951Z","version":"2.0.3"}}]},"published":"2023-05-01T13:15:44.850","references":[{"source":"cve-coordination@google.com","tags":["Exploit","Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d94c04c0db024922e886c9fd429659f22f48ea4"},{"source":"cve-coordination@google.com","tags":["Exploit","Patch"],"url":"https://kernel.dance/9d94c04c0db024922e886c9fd429659f22f48ea4"},{"source":"cve-coordination@google.com","tags":["Vendor Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230601-0010/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d94c04c0db024922e886c9fd429659f22f48ea4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"url":"https://kernel.dance/9d94c04c0db024922e886c9fd429659f22f48ea4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230601-0010/"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cve-coordination@google.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}
|