CVE Catalog

CVE-2023-33250

MediumCVSS 4.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Linux kernel 6.3 has a use-after-free vulnerability in the iopt_unmap_iova_range function in drivers/iommu/iommufd/io_pagetable.c.

Risk Assessment

This vulnerability may lead to unauthorized memory access, posing a risk to system and data integrity.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.

Original NVD description (English source)

The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS