CVE-2023-4732
MEDIUM severity · CVSS 4.7 · CWE-366
4.7CVSS MEDIUM
Summary
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.
Impact & exploitability
Attack vectorLocal
Attack complexityHigh
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (2)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- https://access.redhat.com/errata/RHSA-2023:6901Advisory
- https://access.redhat.com/errata/RHSA-2023:7077Advisory
- https://access.redhat.com/errata/RHSA-2023:7539Advisory
- https://access.redhat.com/errata/RHSA-2024:0412
- https://access.redhat.com/security/cve/CVE-2023-4732Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2236982Advisory