CVE-2023-3159

2023-06-1200:00:00

CWE-416

redhat

www.cve.org

cve-2023-3159

local attacker

privilege

queue_event()

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Kernel version prior to Kernel 5.18-rc6",
        "status": "affected"
      }
    ]
  }
]