CVE-2023-35823

Summary

CVE-2023-35823 is a newly identified vulnerability affecting Linux kernels prior to version 6.3.2. This issue involves a use-after-free condition in the saa7134_finidev function located in drivers/media/pci/saa7134/saa7134-core.c. A use-after-free error occurs when memory that has been freed is accessed again, potentially leading to arbitrary code execution or memory corruption. Exploitation of this vulnerability could result in significant security risks, including potential system crashes or unauthorized access. Users are strongly encouraged to upgrade to a patched version of the Linux kernel as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.