What’s Vulnerable › Vulnerabilities

CVE-2023-1859

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-17 · updated 2026-06-17
• Weakness: CWE-416

Description

A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.

Affected products

• Linux kernel: through 6.2; 6.3-rc1, 6.3-rc2, 6.3-rc3, 6.3-rc4, 6.3-rc5, 6.3-rc6

References

• https://lore.kernel.org/all/20230313090002.3308025-1-zyytlz.wz%40163.com/
• https://lore.kernel.org/all/20230313090002.3308025-1-zyytlz.wz%40163.com/

Get alerted when CVE-2023-1859 or the next vulnerability affects your stack