CVE-2023-26606: Use After Free
In the Linux kernel 6.0.8, there is a use-after-free in ntfstrimfs in fs/ntfs3/bitmap.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.237-1Fixed in 6.1.137-1Fixed in 6.1.135-1Fixed in 6.12.27-1Fixed in 6.12.29-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-26606?
CVE-2023-26606 is classified as a high-severity vulnerability due to its potential for causing a use-after-free condition in the Linux kernel.
How do I fix CVE-2023-26606?
To fix CVE-2023-26606, update to a patched version of the Linux kernel such as 5.10.223-1 or 6.12.12-1.
Which versions of the Linux kernel are affected by CVE-2023-26606?
CVE-2023-26606 affects Linux kernel versions between 5.15 and 6.0.16, as well as versions from 6.1 to 6.1.2.
What components are involved in CVE-2023-26606?
CVE-2023-26606 involves the ntfs_trim_fs function within the fs/ntfs3/bitmap.c file in the Linux kernel.
Is there a known exploit for CVE-2023-26606?
As of the latest information available, there are no specific publicly known exploits for CVE-2023-26606.