CVE-2023-28576

Summary

CVE-2023-28576 is a vulnerability that affects the handling of buffers in certain kernel APIs, such as cam_mem_get_cpu_buf(). After these buffers are obtained by the kernel, they may become readable or writable in userspace. This creates a race condition, allowing user mode to modify packet headers (e.g., header.count) before kernel checks are applied. Consequently, size checks in the kernel code can become invalid, leading to potential out-of-bounds read/write issues.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.