CVE-2023-35823

2023-06-1800:00:00

ubuntu.com

linux kernel

use-after-free

saa7134_finidev

driver removal

physical access

bugzilla

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

14.9%

JSON

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free
was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.

Bugs

Notes

Author	Note
	Priority reason: Requires driver or device to be removed or unbound, which requires either privilege or physical access.
cache-use-only	requires root for driver removal or physical access

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-162.179UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-79.86UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-27.28UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1109.118UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1042.47UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1009.9UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1041.46~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1109.118~18.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.2< 6.2.0-1009.9~22.04.3UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1115.122UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-162.179	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-79.86	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-27.28	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1109.118	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1042.47	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1009.9	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1041.46~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1109.118~18.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.2	< 6.2.0-1009.9~22.04.3	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1115.122	UNKNOWN