CVE-2023-2008

    Dashboard / Vulnerabilities / CVE-2023-2008

    CVE-2023-2008

    Published: 14 Apr 2023Last Modified: 15 Jul 2026

    Summary:

    Details: A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2008.json, https://nvd.nist.gov/vuln/detail/CVE-2023-2008, https://security.netapp.com/advisory/ntap-20230517-0007/, https://www.zerodayinitiative.com/advisories/ZDI-23-441/, https://bugzilla.redhat.com/show_bug.cgi?id=2186862, https://github.com/torvalds/linux/commit/05b252cccb2e5c3f56119d25de684b4f810ba4

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 03c765b0e3b4cb5063276b086c76f7a612856a9a
    Fixed -None

    Affected versions

    Fixed in kernel v5.19-rc4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-2008 | CVE-DB