Beveiligingsadvies

CVE-2023-28577

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-08-08 09:15:07

Laatst bijgewerkt 2024-08-02 13:43:23

Toegewezen door qualcomm

CVSS-score 6.7

Status PUBLISHED

Beschrijving

In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.

← Alle CVE's bekijken Bekijk op cve.org ↗