CVE-2023-4732Medium· 4.7▾ SunlitA flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.
kernel-rt (all versions)kernel (all versions)kernel (all versions)kernel (all versions)kernel (all versions)kernelkernelkernel-rtkernelkernel-rtRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
A possible workaround is disabling Transparent Hugepage
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-4132Medium· 5.5Kernel: smsusb: use-after-free caused by do_submit_urb()
CVE-2023-33951Medium· 6.7Kernel: vmwgfx: race condition leading to information disclosure vulnerability
CVE-2023-33952Medium· 6.7Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects
CVE-2023-3812High· 7.8Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
CVE-2023-3567High· 7.1Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race
CVE-2023-4133Medium· 5.5Kernel: cxgb4: use-after-free in ch_flower_stats_cb()