high7.1
CVE-2023-1838
A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget.
Impact
A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 4.13 before 4.14.317 from 4.15 before 4.19.245 from 4.20 before 5.4.196 from 5.5 before 5.10.118 from 5.11 before 5.15.42 from 5.16 before 5.17.10 |
| Netapp | H300s | All versions |
| Netapp | H410c | All versions |
| Netapp | H410s | All versions |
| Netapp | H500s | All versions |
| Netapp | H700s | All versions |