CVE-2023-1652

Updated: 2025-12-01 03:47:02.988627

Description:

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.1

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.1 HIGH Released CLSA-2024:1712570434 2024-04-08 10:43:44
CentOS 6 ELS kernel 2.6.32 7.1 HIGH Not Vulnerable 2023-04-11 05:04:11
CentOS 7 ELS kernel 3.10.0 7.1 HIGH Not Vulnerable 2024-07-01 10:08:37
CentOS 8.4 ELS kernel 4.18.0 7.1 HIGH Not Vulnerable 2023-04-28 03:33:10
CentOS 8.5 ELS kernel 4.18.0 7.1 HIGH Not Vulnerable 2023-04-13 11:04:32
CentOS Stream 8 ELS kernel 4.18.0 7.1 HIGH Not Vulnerable 2024-06-29 10:08:37
CloudLinux 6 ELS kernel 2.6.32 7.1 HIGH Not Vulnerable 2023-09-20 11:10:41
CloudLinux 7 ELS kernel 3.10.0 7.1 HIGH Ignored 2025-01-10 22:43:24 CL7 support is limited
Oracle Linux 6 ELS kernel 2.6.32 7.1 HIGH Not Vulnerable 2023-12-26 13:16:49
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.1 HIGH Not Vulnerable 2023-04-21 03:19:10
Total: 12