Vulnerability Details : CVE-2023-37454
Potential exploit
An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com reference has a different perspective about this.
Vulnerability category: Memory Corruption
Products affected by CVE-2023-37454
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-37454
0.01%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-37454
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2023-37454
-
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2023-37454
-
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f861765464f43a71462d52026fbddfc858239a5
fs: Block writes to mounted block devices - kernel/git/torvalds/linux.git - Linux kernel source tree
-
https://syzkaller.appspot.com/bug?extid=26873a72980f8fa8bc55
BUG: unable to handle kernel paging request in udf_close_lvidExploit;Mailing List;Third Party Advisory
-
https://syzkaller.appspot.com/bug?extid=60864ed35b1073540d57
KASAN: use-after-free Write in udf_close_lvidExploit;Mailing List;Third Party Advisory
-
https://syzkaller.appspot.com/bug?extid=61564e5023b7229ec85d
KASAN: use-after-free Write in udf_close_lvidExploit;Mailing List;Third Party Advisory
-
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-37454
1213122 – (CVE-2023-37454) VUL-0: CVE-2023-37454: kernel: use-after-free write operation in the udf_put_super
-
https://lore.kernel.org/all/00000000000056e02f05dfb6e11a%40google.com/T/
[syzbot] KASAN: use-after-free Write in udf_close_lvid
-
https://lore.kernel.org/all/00000000000056e02f05dfb6e11a@google.com/T/
[syzbot] KASAN: use-after-free Write in udf_close_lvidExploit;Mailing List;Vendor Advisory
Jump to