THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-52438 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in shinker's callback The mmap read lock is used during the shrinker's callback, which means that using alloc->vma pointer isn't safe as it can race with munmap(). As of commit dd2283

[NVD] CVE-2023-52438 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in shinker's callback The mmap read lock is used during the shrinker's callback, which means that using alloc->vma pointer isn't safe as it can race with munmap(). As of commit dd2283

lownvdPublished 2024-02-20

CVE-2023-52438 CVSS: 7.8 HIGH Published: 2024-02-20T21:15:08.167

In the Linux kernel, the following vulnerability has been resolved:

binder: fix use-after-free in shinker's callback

The mmap read lock is used during the shrinker's callback, which means that using alloc->vma pointer isn't safe as it can race with munmap(). As of commit dd2283f2605e ("mm: mmap: zap pages with read mmap_sem in mun

Indicators of compromise

CVE-2023-52438cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-52438