NetSight
IP …
high7.1

CVE-2023-3141

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel.

Impact

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.39 before 4.14.316
from 4.15 before 4.19.284
from 4.20 before 5.4.244
from 5.5 before 5.10.181
from 5.11 before 5.15.113
from 5.16 before 6.1.30
NetappHci Baseboard Management Controller
Versions h300s, h410c, h410s, h500s, h700s
DebianDebian Linux
Version 10.0

Weakness classification

CWE-416

References