CVE Catalog
CVE-2023-52879
MediumSummary
In the Linux kernel, a vulnerability was found in the tracing mechanism where trace_event_file lacks reference counters. This can lead to use-after-free and kernel crash.
Risk Assessment
An attacker with local access could cause a system hang (DoS) by manipulating kprobe events.
Recommendation
Apply a Linux kernel update that includes the fix for this vulnerability.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters The following can crash the kernel: # cd /sys/kernel/tracing # echo 'p:sched schedule' > kprobe_events # exec 5>>events/kprobes/sched/enable # > kprobe_events # exec 5>&- The

