CVE-2023-3439

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-28 · updated 2026-06-17
Weakness: CWE-416

Description

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

Affected products

Linux kernel: from 5.15 through 5.17; 5.18-rc1, 5.18-rc2, 5.18-rc3, 5.18-rc4

References

http://www.openwall.com/lists/oss-security/2023/07/02/1
https://bugzilla.redhat.com/show_bug.cgi?id=2217915
https://github.com/torvalds/linux/commit/b561275d633bcd8e0e8055ab86f1a13df75a0269
http://www.openwall.com/lists/oss-security/2023/07/02/1
https://bugzilla.redhat.com/show_bug.cgi?id=2217915
https://github.com/torvalds/linux/commit/b561275d633bcd8e0e8055ab86f1a13df75a0269

Get alerted when CVE-2023-3439 or the next vulnerability affects your stack