CVE-2023-35827
Summary
| CVE | CVE-2023-35827 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-06-18 22:15:09 UTC |
| Updated | 2026-10-15 00:16:33 UTC |
| Description | An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. |
Risk And Classification
Primary CVSS: v3.1 7 HIGH from [email protected]
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-362 | CWE-416 | n/a
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
HighPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Na | N/a | affected n/a | Not specified |
| ADP | Siemens | RUGGEDCOM RST2428P | unaffected * custom | Not specified |
| ADP | Siemens | SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 Family | unaffected * custom | Not specified |
| ADP | Siemens | SCALANCE XCM-/XRM-/XCH-/XRH-300 Family | unaffected * custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem | affected V1.1 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| lists.debian.org/debian-lts-announce/2024/01/msg00005.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | |
| cert-portal.siemens.com/productcert/html/ssa-613116.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| CVE-2023-35827 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security | af854a3a-2127-422b-91ae-364da2661108 | security.netapp.com | |
| [PATCH net] net: ravb: Fix possible UAF bug in ravb_remove — Netdev | af854a3a-2127-422b-91ae-364da2661108 | www.spinics.net | Patch, Third Party Advisory |
| cert-portal.siemens.com/productcert/html/ssa-794697.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| [PATCH net] net: ravb: Fix possible UAF bug in ravb_remove | af854a3a-2127-422b-91ae-364da2661108 | lore.kernel.org | |
| [PATCH net] net: ravb: Fix possible UAF bug in ravb_remove | MITRE | lore.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161352 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2024-12159)
- 200098 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6625-1)
- 200099 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6624-1)
- 200100 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6626-1)
- 200102 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-6625-2)
- 200103 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6628-1)
- 200111 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6626-2)
- 200118 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6628-2)
- 200120 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-6626-3)
- 200125 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-6625-3)
- 200132 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-6652-1)
- 6000419 Debian Security Update for linux (DSA 5594-1)
- 6000428 Debian Security Update for linux-5.10 (DLA 3711-1)
- 755966 SUSE Enterprise Linux Security Update for the linux kernel (SUSE-SU-2024:0857-1)
- 755988 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0975-1)
- 756004 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0926-1)
- 756005 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0925-1)