Linux Kernel Udmabuf Driver Vulnerability by Linux Foundation
CVE-2023-2008

8.2HIGH

Key Information:

Vendor: Linux
Status: Kernel; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 9.0 Extended Update Support; Red Hat Enterprise Linux 6
Vendor: CVE Published:; 14 April 2023

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2023-2008?

A flaw in the Linux kernel's udmabuf device driver has been identified, where improper validation of user-supplied data in a fault handler can lead to memory access beyond the end of an array. This vulnerability allows an attacker to escalate privileges, enabling arbitrary code execution within the kernel context. Ensuring proper data validation and implementing patches is crucial for mitigating potential risks associated with this vulnerability.

Affected Version(s)

kernel 4.20 < 5.4.202

kernel 5.5 < 5.10.127

kernel 5.11 < 5.15.51

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-2008
Created by bluefrostsecurity