Yüksek CVSS 7.8

CVE-2023-3611: Linux Kernel: sınır dışı yazma

Yayın: 22 Temmuz 2023 00:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,29 (yüzdelik 22)
CWE: CWE-787
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	3.8	—	4.14.322
linux-linux-kernel	4.15	—	4.19.291
linux-linux-kernel	4.20	—	5.4.253
linux-linux-kernel	5.5	—	5.10.188
linux-linux-kernel	5.11	—	5.15.121
linux-linux-kernel	5.16	—	6.1.40
linux-linux-kernel	6.2	—	6.4.5
linux-linux-kernel	6.5	6.5	—
debian-debian-linux	10.0	10.0	—
debian-debian-linux	11.0	11.0	—
debian-debian-linux	12.0	12.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları