CVE-2023-2007

EPSS 0.3%CWE-367

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

24 Apr 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

Affected products

n/a · Linux kernel's DPT I2O Controller driver

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0 https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html https://security.netapp.com/advisory/ntap-20240119-0011/https://www.debian.org/security/2023/dsa-5480