CVE-2023-51781: Use After Free
An issue was discovered in the Linux kernel before 6.6.8. atalkioctl in net/appletalk/ddp.c has a use-after-free because of an atalkrecvmsg race condition.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 6.6.8 - Configuration
Ensure /etc/modprobe.d/blacklist-rare-network.conf contains the line: alias net-pf-5 off
Linux Appletalk module alias net-pf-5 = off
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51781?
CVE-2023-51781 is classified as a high severity vulnerability due to its potential exploitation in the Linux kernel.
How do I fix CVE-2023-51781?
To fix CVE-2023-51781, update your Linux kernel to version 6.6.8 or later, or apply the specific patches provided by your distribution.
What versions of the Linux kernel are affected by CVE-2023-51781?
CVE-2023-51781 affects all Linux kernel versions prior to 6.6.8, including the 2.6.x series up to 6.7-rc5.
What type of vulnerability is CVE-2023-51781?
CVE-2023-51781 is a use-after-free vulnerability caused by a race condition in atalk_recvmsg within the Linux kernel.
Who is affected by CVE-2023-51781?
Users and systems running vulnerable versions of the Linux kernel, particularly versions between 2.6.12 and 6.6.8, are susceptible to CVE-2023-51781.