CVE-2023-3159
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A use after free issue was discovered in the Linux Kernel in the outbound_phy_packet_callback function in the driver/firewire module. A local attacker with special privileges may cause a use after free problem when queue_event() fails.
Risk Assessment
The organization may be exposed to attacks from local users who could exploit this vulnerability to destabilize the system or gain unauthorized access to resources.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor systems for potential exploitation attempts.
Original NVD description (English source)
A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.