CVE-2023-3317
At a glance Severity HIGH 7.1 EPSS EPSS 0.24 % · percentile 15 (2026-10-27) State PUBLISHED Published 2023-06-23 Updated 2025-03-11 Assigner redhat NVD status Modified Description A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CISA-ADP CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.2 < 6.2.15cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*Affected products Product Versions Kernel affected KErnel version prior to 6.3-rc6
References
Sources
