A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.
References
| Link | Resource |
|---|---|
| https://security.netapp.com/advisory/ntap-20230703-0006/ | Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2023/05/08/3 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
12 Sep 2023, 19:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:* |
|
| First Time |
Netapp hci Baseboard Management Controller
Netapp |
|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20230703-0006/ - Third Party Advisory |
03 Jul 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jun 2023, 19:10
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | CWE-787 | |
| First Time |
Linux linux Kernel
Linux |
|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | (MISC) https://www.openwall.com/lists/oss-security/2023/05/08/3 - Mailing List, Third Party Advisory |
01 Jun 2023, 01:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-01 01:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-2598
Mitre link : CVE-2023-2598
CVE.ORG link : CVE-2023-2598
JSON object : View
Products Affected
netapp
- hci_baseboard_management_controller
linux
- linux_kernel