Wind River Support Network

HomeDefectsLIN1018-11372

Fixed

LIN1018-11372 : Security Advisory - linux - CVE-2023-40791

Created: Oct 16, 2023 Updated: Oct 19, 2023

Resolved Date: Oct 19, 2023

Found In Version: 10.18.44.1

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Kernel

Description

extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page.

CREATE(Triage):(User=admin) CVE-2023-40791 (https://nvd.nist.gov/vuln/detail/CVE-2023-40791)