CVE-2023-4387High· 7.1▾ TwilightA use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.
kernel (all versions)kernel (all versions)kernel (all versions)kernelkernelkernel-rtkernel-rt (all versions)kernel-rt (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is to skip loading the affected module "vmxnet3" onto the system until the fix is available, this can be done by a blacklist mechanism which will ensure the driver is not loaded at the boot time.
How do I blacklist a kernel module to prevent it from loading automatically?
https://access.redhat.com/solutions/41278
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-4147High· 7.8Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free
CVE-2024-0562High· 7.8Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c
CVE-2024-0582High· 7.8Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap
CVE-2024-0193High· 7.8Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
CVE-2023-3397High· 7.0Kernel: slab-use-after-free write in txend due to race condition
CVE-2023-6270High· 7.0Kernel: aoe: improper reference count leads to use-after-free vulnerability