Wind River Support Network

HomeDefectsLIN1023-1403
Fixed

LIN1023-1403 : Security Advisory - linux - CVE-2023-21400

Created: Jul 20, 2023    Updated: Sep 27, 2023
Resolved Date: Aug 29, 2023
Found In Version: 10.23.30.1
Fix Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In multiple functions  of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.



CREATE(Triage):(User=admin) CVE-2023-21400 (https://nvd.nist.gov/vuln/detail/CVE-2023-21400)

CVEs


Live chat
Online