CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.7. See the original NVD description below for full technical details.
CVE
CVE-2023-28577
Severity
MEDIUM
CVSS
6.7
EPSS
0.12%
Original NVD Description
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.
Related CVEs
Other vulnerabilities affecting the same vendor(s)