AZL-26623
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-26623.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-26623
- Upstream
- Published
- 2023-05-05T17:15:09Z
- Modified
- 2026-04-21T04:23:42Z
- Severity
-
- 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2023-32269 affecting package kernel for versions less than 5.15.112.1-1
- Details
-
An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.
- References