CVE-2023-21228

Summary

CVE-2023-21228 is a recently disclosed vulnerability affecting the Linux kernel. In the PMRChangeSparseMemOSMem function of physmem_osmem_linux.c, a boundary check error has been identified. This issue results in a possible out-of-bounds write, enabling a local privilege escalation in the kernel. Notably, no additional execution privileges are required for exploitation. Users are encouraged to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.