CVE-2023-35827: Use After Free
An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravbremove in drivers/net/ethernet/renesas/ravbmain.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35827?
CVE-2023-35827 has been assessed with significant severity due to the use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2023-35827?
To fix CVE-2023-35827, upgrade to a kernel version greater than 6.3.8 or apply the available patches for affected Debian packages.
Which versions of the Linux kernel are affected by CVE-2023-35827?
CVE-2023-35827 affects the Linux kernel versions up to and including 6.3.8.
What is the impact of CVE-2023-35827 on system security?
The impact of CVE-2023-35827 could potentially allow an attacker to execute arbitrary code with elevated privileges on the affected system.
Is CVE-2023-35827 a remote or local vulnerability?
CVE-2023-35827 is considered a local vulnerability as it requires local access to exploit the use-after-free condition.