CVE-2023-2007
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.
| CWE | CWE-367 |
| Vendor | n/a |
| Product | linux kernel's dpt i2o controller driver |
| Published | Apr 24, 2023 |
| Last Updated | Aug 2, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a linux kernel's dpt i2o controller driver
Be the first to know when new unknown vulnerabilities affecting n/a linux kernel's dpt i2o controller driver are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / Linux kernel's DPT I2O Controller driver
Fixed in kernel v6.0-rc1
References
github.com: https://github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0 lists.debian.org: https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html debian.org: https://www.debian.org/security/2023/dsa-5480 lists.debian.org: https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html security.netapp.com: https://security.netapp.com/advisory/ntap-20240119-0011/