CVE-2023-3159: Use After Free
A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent() fails.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-3159?
CVE-2023-3159 is classified as a high severity vulnerability due to the potential for local attackers to exploit it.
How do I fix CVE-2023-3159?
To fix CVE-2023-3159, upgrade to the patched versions of Linux Kernel, such as 5.10.223-1 or 6.1.123-1.
Which versions of Linux Kernel are affected by CVE-2023-3159?
CVE-2023-3159 affects Linux Kernel versions up to 5.18, including specific release candidates.
Can remote attackers exploit CVE-2023-3159?
No, CVE-2023-3159 can only be exploited by local attackers with special privileges.
What type of issue is CVE-2023-3159?
CVE-2023-3159 is characterized as a use after free vulnerability in the FireWire driver of the Linux Kernel.