CVE Catalog

CVE-2023-52879

Medium
Published: Translated: NVD NIST

Summary

In the Linux kernel, a vulnerability was found in the tracing mechanism where trace_event_file lacks reference counters. This can lead to use-after-free and kernel crash.

Risk Assessment

An attacker with local access could cause a system hang (DoS) by manipulating kprobe events.

Recommendation

Apply a Linux kernel update that includes the fix for this vulnerability.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters The following can crash the kernel: # cd /sys/kernel/tracing # echo 'p:sched schedule' > kprobe_events # exec 5>>events/kprobes/sched/enable # > kprobe_events # exec 5>&- The

Vulnerability data from NVD (NIST) · CISA KEV · EPSS