CVE-2023-2985

2023-06-0100:00:00

ubuntu.com

linux kernel

hfsplus_put_super

denial of service

local user

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.1%

JSON

A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c
in the Linux Kernel. This flaw could allow a local user to cause a denial
of service problem.

Bugs

<https://bugzilla.redhat.com/show_bug.cgi?id=2211097>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-216.227UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-152.169UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-75.82UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-45.46UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-244.278UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1160.173UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1104.112UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1038.43UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1027.28UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1122.128UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-216.227	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-152.169	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-75.82	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-45.46	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-244.278	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1160.173	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1104.112	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1038.43	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1027.28	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1122.128	UNKNOWN