Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2023-38409
HistoryJul 17, 2023 - 10:15 p.m.

CVE-2023-38409

2023-07-1722:15:09
mitre
web.nvd.nist.gov
253
cve-2023-38409
linux kernel
set_con2fb_map
security
vulnerability
nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0

Percentile

9.0%

JSON

An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info).

Affected configurations

Nvd
Node
linuxlinux_kernelRange<6.2.12
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Related

ubuntucve 1
nessus 28
redhatcve 1
prion 1
nvd 1
cvelist 1
cbl_mariner 3
cnvd 1
debiancve 1
f5 1
openvas 4
centos 1
redhat 18
oraclelinux 4
ibm 5
osv 4
rocky 2
ubuntucve
ubuntucve
CVE-2023-38409
2023-07-17 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-38409)
2023-08-11 00:00:00
RHEL 7 : kernel (RHSA-2024:1249)
2024-04-08 00:00:00
CentOS 7 : kernel (RHSA-2024:1249)
2024-03-12 00:00:00
redhatcve
redhatcve
CVE-2023-38409
2023-08-08 14:49:42
prion
prion
Design/Logic Flaw
2023-07-17 22:15:00
nvd
nvd
CVE-2023-38409
2023-07-17 22:15:09
cvelist
cvelist
CVE-2023-38409
2023-07-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-38409 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-38409 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
CVE-2023-38409 affecting package hyperv-daemons for versions less than 5.15.122.1-1
2023-08-10 16:37:57
cnvd
cnvd
Linux kernel fbcon.c file out-of-bounds read vulnerability
2023-07-19 00:00:00
debiancve
debiancve
CVE-2023-38409
2023-07-17 22:15:09
f5
f5
K000140563: Linux kernel vulnerability CVE-2023-38409
2024-08-02 00:00:00
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2024:1249)
2024-03-26 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3311-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3376-1)
2024-03-04 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2024-03-25 15:37:48
redhat
redhat
(RHSA-2024:1332) Important: kernel-rt security update
2024-03-14 14:41:35
(RHSA-2024:1249) Important: kernel security and bug fix update
2024-03-12 00:03:17
(RHSA-2024:0563) Important: kernel-rt security update
2024-01-30 12:10:10
oraclelinux
oraclelinux
kernel security and bug fix update
2024-03-20 00:00:00
kernel security update
2024-01-26 00:00:00
kernel security update
2024-03-07 00:00:00
ibm
ibm
Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Storage Scale System
2024-04-04 11:02:32
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management
2024-09-27 18:18:26
Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities
2024-06-07 15:32:38
osv
osv
Moderate: kernel-rt security and bug fix update
2024-05-22 00:00:00
Moderate: kernel security, bug fix, and enhancement update
2024-06-14 13:59:16
Moderate: kernel security, bug fix, and enhancement update
2024-05-22 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2024-06-14 13:59:36
kernel security, bug fix, and enhancement update
2024-06-14 13:59:16

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for CVE-2023-38409
ubuntucve1nessus28redhatcve1prion1nvd1cvelist1cbl_mariner3cnvd1debiancve1f51openvas4centos1redhat18oraclelinux4ibm5osv4rocky2