CVE-2023-51780

Summary

CVE-2023-51780 is a newly disclosed vulnerability affecting Linux kernels prior to version 6.6.8. This issue is rooted in the net/atm/ioctl.c file, specifically the do_vcc_ioctl function. A race condition exists within a vcc_recvmsg context, leading to a use-after-free scenario. Successful exploitation of this vulnerability could result in arbitrary code execution or denial-of-service attacks, posing a significant security risk to affected systems. It is strongly advised to update to a patched kernel release as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.