CVE-2023-3317

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	Kernel	KErnel version prior to 6.3-rc6

References

Timeline

Published: Jun 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-331708.1ASP.NET and Visual Studio Security Feature Bypass Vulnerability CVE-2023-331716.1Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability CVE-2023-331727.5Remote Procedure Call Runtime Denial of Service Vulnerability CVE-2023-331737.5Remote Procedure Call Runtime Denial of Service Vulnerability CVE-2023-331745.5Windows Cryptographic Information Disclosure Vulnerability CVE-2023-331757.5ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to st CVE-2023-331766.5BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a CVE-2023-331778.8Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be CVE-2023-331786.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CM CVE-2023-331796.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.CVE-2023-33185.4A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected by this vulnerabilit CVE-2023-331806.5Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.