CVE-2023-3863

MediumCVSS 4.1/10Last modified Jun 17, 2026

Description

A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	Kernel	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—
Fedora	Fedora	—

References

https://access.redhat.com/security/cve/CVE-2023-3863Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2225126Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/6709d4b7bc2e079241fdef15d1160581c5261c10Patch
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20240202-0002/
https://www.debian.org/security/2023/dsa-5480Third Party Advisory
https://www.debian.org/security/2023/dsa-5492Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-3863Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2225126Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/6709d4b7bc2e079241fdef15d1160581c5261c10Patch
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20240202-0002/
https://www.debian.org/security/2023/dsa-5480Third Party Advisory
https://www.debian.org/security/2023/dsa-5492Third Party Advisory

Timeline

Published: Jul 24, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-386329.8async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets.CVE-2023-386335.5A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on t CVE-2023-38647.2Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a CVE-2023-386404.4A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22). The affected application is installed with specific fi CVE-2023-386417.8A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as CVE-2023-386469.8Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at CVE-2023-386479.8An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax CVE-2023-386487.8Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially CVE-2023-386497.8Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially CVE-2023-38657.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message do CVE-2023-386507.8Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A special CVE-2023-386517.8Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A special