CVE-2023-3567

Summary

CVE-2023-3567 is a use-after-free vulnerability affecting the vcs_read function in the Linux Kernel's vc_screen module (drivers/tty/vt/vc_screen.c). An attacker with local user access can exploit this flaw to cause a system crash or disclose internal kernel information. The vulnerability occurs when a previously freed memory location is accessed again, leading to undefined behavior and potential security risks. The Linux Kernel team has released a patch to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.