All vulnerabilities
CVE-2023-0266

Linux Kernel Use-After-Free Vulnerability

Linux KernelOperating systems
Open in ThreatlineRecord JSON
CVSS
7.9High
ExploitationExploited in the wildAdded to KEV 30 Mar 2023CISA KEV
Exploit odds (EPSS)3.67%Chance of exploitation activity in the next 30 days, higher than 89% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in56b88b50565cd8b946a2d00b0c83927b7ebb055eFixed versionCVE List
Federal deadline20 Apr 2023Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

  • 56b88b50565cd8b946a2d00b0c83927b7ebb055eLinux KernelCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 30 Jan 2023, 13:09 UTCPublishedCVE List
  2. 30 Mar 2023Added to CISA KEVCISA KEV

Description

Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.

Text from CVE List

Affected versions 1

  • Linux Kernelaffected: 4.14 before 56b88b50565cd8b946a2d00b0c83927b7ebb055eCVE List

References 6