CVE-2023-45896: High severity Linux Foundation Linux Kernel vulnerability
ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Linux distribution is configured to allow unprivileged mounts of removable media) and then leveraging local access to trigger an out-of-bounds read. A length value can be larger than the amount of memory allocated. NOTE: the supplier's perspective is that there is no vulnerability when an attack requires an attacker-modified filesystem image.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45896?
CVE-2023-45896 is considered a high severity vulnerability due to its potential for local exploitation.
How do I fix CVE-2023-45896?
To fix CVE-2023-45896, update the Linux Kernel to version 6.8.1 or later.
What impact does CVE-2023-45896 have on system security?
CVE-2023-45896 allows a physically proximate attacker to read kernel memory, potentially exposing sensitive information.
Which versions of the Linux Kernel are affected by CVE-2023-45896?
CVE-2023-45896 affects the Linux Kernel versions up to and including 6.8.0.
Who is at risk for CVE-2023-45896?
Users of Linux distributions that allow unprivileged mounts of removable media are at risk for CVE-2023-45896.