CVE-2023-26544: Use After Free
Published Feb 25, 2023
·Updated
In the Linux kernel 6.0.8, there is a use-after-free in rununpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.
Affected Software
4 affected componentsFixes available
Linux Linux kernel>=5.15<5.15.87
Linux Linux kernel>=5.16<6.0.17
Linux Linux kernel>=6.1<6.1.3
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Feb 25, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Mar 28, 2024
Data Sourced
via Launchpad·12:49 AM
Description
Dec 1, 2024
Data Sourced
via Ubuntu·04:30 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-26544?
CVE-2023-26544 has a medium severity rating due to its potential for causing use-after-free errors in the Linux kernel.
2
How do I fix CVE-2023-26544?
To fix CVE-2023-26544, upgrade to a patched version of the Linux kernel such as 5.10.223-1, 5.10.226-1, 6.1.119-1, or later.
3
Which versions of the Linux kernel are affected by CVE-2023-26544?
CVE-2023-26544 affects Linux kernel versions between 5.15 and 6.0.17, as well as 6.1 versions prior to 6.1.3.
4
What is the specific issue described in CVE-2023-26544?
CVE-2023-26544 describes a use-after-free vulnerability in the Linux kernel NTFS file system handling, particularly in the run_unpack function.
5
When was CVE-2023-26544 last updated?
CVE-2023-26544 was last updated on 29 November 2024.