CVE-2023-40791
First published: Mon Oct 16 2023(Updated: )
extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <6.4.12 | |
| All of | ||
| Netapp H300s Firmware | ||
| Netapp H300s | ||
| All of | ||
| Netapp H500s Firmware | ||
| Netapp H500s | ||
| All of | ||
| Netapp H700s Firmware | ||
| Netapp H700s | ||
| All of | ||
| Netapp H410s Firmware | ||
| Netapp H410s |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f443fd5af5dbd531f880d3645d5dd36976cf087f
- https://lkml.org/lkml/2023/8/3/323
- https://lore.kernel.org/linux-crypto/20571.1690369076@warthog.procyon.org.uk/
- https://lore.kernel.org/linux-crypto/20571.1690369076%40warthog.procyon.org.uk/
- https://security.netapp.com/advisory/ntap-20231110-0009/
Frequently Asked Questions
What is CVE-2023-40791?
CVE-2023-40791 is a vulnerability in the Linux kernel before version 6.4.12 that can lead to pages not being unpinned in a specific situation.
How severe is CVE-2023-40791?
CVE-2023-40791 has a severity rating of 9.1, which is considered critical.
What software is affected by CVE-2023-40791?
Linux kernel versions before 6.4.12 are affected by CVE-2023-40791.
How can I fix CVE-2023-40791?
To fix CVE-2023-40791, update the Linux kernel to version 6.4.12 or later.
Where can I find more information about CVE-2023-40791?
For more information about CVE-2023-40791, you can refer to the following links: [ChangeLog-6.4.12](https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12), [Commit Details](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f443fd5af5dbd531f880d3645d5dd36976cf087f), [Kernel Mailing List Discussion](https://lkml.org/lkml/2023/8/3/323).
- collector/nvd-index
- collector/mitre-cve
- agent/references
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/author
- agent/event
- agent/severity
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/linux
- canonical/linux linux kernel
- vendor/netapp
- canonical/netapp h300s firmware
- canonical/netapp h300s
- canonical/netapp h500s firmware
- canonical/netapp h500s
- canonical/netapp h700s firmware
- canonical/netapp h700s
- canonical/netapp h410s firmware
- canonical/netapp h410s