CVE-2023-37454
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
An issue was discovered in the Linux kernel through 6.4.2 related to the UDF filesystem, leading to a use-after-free write operation in the udf_put_super and udf_close_lvid functions.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized memory access, posing a risk of system instability and potential data loss.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com reference has a different perspective about this.