CVE-2023-1611: Use After Free
A slab-use-after-free read flaw was found in btrfssearchslot in fs/btrfs/ctree.c
The quota assigned ioctl can currently run in parallel with a quota disable ioctl call. The assign ioctl uses the quota root, while the disable ioctl frees that root, and therefore we can have a use-after-free triggered in the assign ioctl.
Reference: https://lore.kernel.org/linux-btrfs/35b9a70650ea947387cf352914a8774b4f7e8a6f.1679481128.git.fdmanana@suse.com/
Other sources
A use-after-free flaw was found in btrfssearchslot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1611?
CVE-2023-1611 is classified as a critical vulnerability due to its potential for a use-after-free condition that can be exploited.
How do I fix CVE-2023-1611?
To mitigate CVE-2023-1611, update your kernel to the latest version specified in the remediation documents from your Linux distribution.
What systems are affected by CVE-2023-1611?
CVE-2023-1611 affects various Linux kernel versions, including kernels up to 5.10.177, 5.15.106, 6.1.23, and 6.2.10.
What type of vulnerability is CVE-2023-1611?
CVE-2023-1611 is a slab-use-after-free read vulnerability that can lead to memory access violations.
Is there a proof of concept for CVE-2023-1611?
Yes, CVE-2023-1611 has had discussions and references in exploit communities, but specific proof of concept details may vary.