CVE-2023-45898

Summary

CVE-2023-45898 is a newly disclosed vulnerability affecting the Linux kernel version prior to 6.5.4. This issue leads to a use-after-free condition in the ext4 file system, specifically in the extents_status.c file, during the ext4_es_insert_extent function execution. Exploitation of this vulnerability could potentially allow attackers to execute arbitrary code with kernel privileges, resulting in a serious security risk for affected systems. System administrators are advised to upgrade their Linux kernels as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.