CVE-2023-26605: Use After Free
In the Linux kernel 6.0.8, there is a use-after-free in inodecgwbmovetoattached in fs/fs-writeback.c, related to listdelentryvalid.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-26605?
CVE-2023-26605 is considered a severe vulnerability due to the use-after-free issue in the Linux kernel.
How do I fix CVE-2023-26605?
To fix CVE-2023-26605, upgrade to fixed versions like 5.10.223-1, 6.1.123-1, or later versions that address this vulnerability.
What versions of the Linux kernel are affected by CVE-2023-26605?
CVE-2023-26605 affects Linux kernel versions from 5.15.75 to 5.15.81 and between 5.19.17 to 6.0.11.
What kind of vulnerability is CVE-2023-26605?
CVE-2023-26605 is a use-after-free vulnerability, which can potentially lead to arbitrary code execution.
When was CVE-2023-26605 last updated?
CVE-2023-26605 was last updated on 29 November 2024.