CVE-2023-4732

CVSS v3.1 4.7 (Medium)

EPSS 0.04 % (5^th)

Affected Products 10

Advisories 4

A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.

Weaknesses

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-366: Race Condition within a Thread

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2023-10-03 17:15:09
(11 months ago)
Updated Date: 2024-01-25 20:15:38
(7 months ago)

Affected Products

Linux

Linux Kernel

Redhat

Configuration #1

		CPE23	From	Up To
	Linux Kernel 5.13.19 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 5.13.19

Configuration #2

		CPE23	From	Up To
	Redhat Codeready Linux Builder 8.0	cpe:2.3:a:redhat:codeready_linux_builder:8.0
	Redhat Codeready Linux Builder for Arm64 8.0 Aarch64	cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64
	Redhat Codeready Linux Builder for Power Little Endian 8.0 Ppc64le	cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le
	Redhat Enterprise Linux 8.0	cpe:2.3:o:redhat:enterprise_linux:8.0
	Redhat Enterprise Linux for Arm 64 8.0 Aarch64	cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64
	Redhat Enterprise Linux for Ibm Z Systems 8.0 S390x	cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x
	Redhat Enterprise Linux for Power Little Endian 8.0 Ppc64le	cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le
	Redhat Enterprise Linux for Real Time 8.0	cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0
	Redhat Enterprise Linux for Real Time For Nfv 8.0	cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0