CVE-2023-35825: Use After Free
First published: Sun Jun 18 2023(Updated: )
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <6.4 | 6.4 |
| IBM Security Verify Governance, Identity Manager software component | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager virtual appliance component | <=ISVG 10.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=63264422785021704c39b38f65a78ab9e4a186d7
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4
- https://lore.kernel.org/lkml/20230501030540.3254928-4-sashal@kernel.org/
- https://lore.kernel.org/all/20230523164950.435226211@linuxfoundation.org/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2215914
- https://access.redhat.com/errata/RHSA-2023:6583
- https://access.redhat.com/errata/RHSA-2023:6901
- https://access.redhat.com/errata/RHSA-2023:7077
- https://access.redhat.com/errata/RHSA-2024:0575
- https://access.redhat.com/errata/RHSA-2024:0724
- https://bugzilla.redhat.com/show_bug.cgi?id=2215837
- https://www.ibm.com/support/pages/node/7172423 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2023-35825?
CVE-2023-35825 is marked as a duplicate and does not have a severity rating since it should be referenced to CVE-2023-3141.
How do I fix CVE-2023-35825?
Since CVE-2023-35825 is a duplicate, fixes should be sought in the patches or updates related to CVE-2023-3141.
Which software is affected by CVE-2023-35825?
CVE-2023-35825 affects Red Hat kernel version up to 6.4 and IBM Security Verify Governance, Identity Manager version up to ISVG 10.0.2.
Is CVE-2023-35825 still relevant?
No, CVE-2023-35825 is not relevant and should not be used; it is a duplicate of CVE-2023-3141.
What action should be taken regarding CVE-2023-35825?
Users should disregard CVE-2023-35825 and refer to CVE-2023-3141 for guidance and mitigation.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/severity
- agent/status
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-35825
- agent/software-canonical-lookup
- agent/trending
- collector/ibm-support
- source/IBM
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/description
- status/rejected
- package-manager/redhat
- vendor/ibm
- canonical/ibm security verify governance, identity manager software component
- version/ibm security verify governance, identity manager software component/isvg 10.0.2
- canonical/ibm security verify governance, identity manager virtual appliance component
- version/ibm security verify governance, identity manager virtual appliance component/isvg 10.0.2