CVE-2023-3268

State: Published
Severity: 7.1 High
Published: Jun 16, 2023
Updated: Oct 14, 2026
Reserved: Jun 15, 2023

Description

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-125

Affected Products

Product	Versions
kernelLinux	2.6.22 to before 4.19.283Affected 4.20 to before 5.4.243Affected 5.5 to before 5.10.180Affected 5.11 to before 5.15.111Affected 5.16 to before 6.1.28Affected 6.2 to before 6.2.15Affected 6.3 to before 6.3.2Affected

References

https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2
DSA-5448vendor-advisory
[debian-lts-announce] 20230727 [SECURITY] [DLA 3508-1] linux security updatemailing-list
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1
DSA-5480vendor-advisory
https://security.netapp.com/advisory/ntap-20230824-0006/
[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security updatemailing-list
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-806742.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.