CVE-2023-3317
En bref Sévérité HIGH 7.1 EPSS EPSS 0.24 % · centile 15 (2026-10-28) État PUBLISHED Publiée 2023-06-23 Mise à jour 2025-03-11 Attribuée par redhat Statut NVD Modified Description A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CISA-ADP CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.2 < 6.2.15cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*Produits affectés Produit Versions Kernel affected KErnel version prior to 6.3-rc6
Références
Sources
