Bug 2184395 (CVE-2023-1859) - CVE-2023-1859 kernel: Use after free in xen_9pfs_front_remove due to race condition
Summary: CVE-2023-1859 kernel: Use after free in xen_9pfs_front_remove due to race con...
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2023-1859
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2184593
Blocks: 2184396
TreeView+ depends on / blocked
 
Reported: 2023-04-04 14:23 UTC by Pedro Sampaio
Modified: 2024-04-17 18:04 UTC (History)
45 users (show)

Fixed In Version: kernel 6.3-rc7
Clone Of:
Environment:
Last Closed: 2023-04-05 10:04:54 UTC
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2023-04-04 14:23:46 UTC 
Use after free in xen_9pfs_front_remove due to race condition.

References:

https://lore.kernel.org/all/20230313090002.3308025-1-zyytlz.wz@163.com/
Comment 2 Rohit Keshri 2023-04-05 06:19:09 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2184593]
Comment 4 Rohit Keshri 2023-04-05 06:25:59 UTC 
There was no shipped kernel version were seen affected with this problem. These files are not built in our source code.
Comment 7 Product Security DevOps Team 2023-04-05 10:04:51 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2023-1859
Comment 8 hackerzheng666 2023-04-10 03:31:28 UTC 
Credit Information:

Zheng Wang(@xmzyshypnc), Zhuorao Yang(@A1ex), Yang Hu(@BlueSheep) and Zong Cao(@P1umer)
Comment 9 hackerzheng666 2023-04-10 03:36:39 UTC 
The newest patch will be applied to  6.3-rc7 soon:

https://lore.kernel.org/all/ZDM%2F4C0PlbbzV%2F0R@7e9e31583646/
Note You need to log in before you can comment on or make changes to this bug.