CVE-2023-35827: An issue was discovered in the Linux kernel through 6.3.8

High severity · published Jun 18, 2023

CVE-2023-35827

An issue was discovered in the Linux kernel through 6.3.8

7.0

CVSS

0.2%

EPSS

On KEV

Description

An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

High

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 9% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

before 6.3.8 · source: NVD

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens

before V1.1 · source: CISA

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-35827

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-35827

lists.debian.org

https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html

lore.kernel.org

https://lore.kernel.org/lkml/cca0b40b-d6f8-54c7-1e46-83cb62d0a2f1%40huawei.com/T/

security.netapp.com

https://security.netapp.com/advisory/ntap-20230803-0003/

Patch

https://www.spinics.net/lists/netdev/msg886947.html

cert-portal.siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-613116.html

cert-portal.siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-794697.html