CVE-2023-3567

HighCVSS 7.1/10Last modified Nov 7, 2026

Description

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 6—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 9—

References

Timeline

Published
Jul 24, 2023
Last modified
Nov 7, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-356707.8In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a patCVE-2023-356715.5In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number aCVE-2023-356738.8In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximCVE-2023-356747.8In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead tCVE-2023-356755.5In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user oCVE-2023-356767.8In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafCVE-2023-356775.5In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could leaCVE-2023-356795.5In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local informationCVE-2023-35684.8Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.CVE-2023-356805.5In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to locaCVE-2023-356819.8In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remoCVE-2023-356827.8In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. Th
CVE-2023-3567: High severity, CVSS 7.1 | Vulnix