CVE-2023-1859: Use After Free
A use-after-free flaw was found in xen9pfsfrontremovet in net/9p/transxen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1859?
CVE-2023-1859 is considered a moderate severity vulnerability due to the potential for system crashes and kernel information leaks.
How do I fix CVE-2023-1859?
To fix CVE-2023-1859, update the Linux Kernel to versions specifically patched for the vulnerability, such as updates beyond version 6.2.
Who is affected by CVE-2023-1859?
CVE-2023-1859 affects users running vulnerable versions of the Linux Kernel up to and including version 6.2 and certain release candidates of version 6.3.
What type of vulnerability is CVE-2023-1859?
CVE-2023-1859 is classified as a use-after-free vulnerability in the Xen transport for 9pfs within the Linux Kernel.
Can CVE-2023-1859 be exploited remotely?
CVE-2023-1859 is primarily a local privilege escalation vulnerability, requiring local access for exploitation.