CVE-2023-0266

Linux Kernel Use-After-Free Vulnerability
2.6%
EPSS
86%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.

Vendor
Linux
Product
Kernel
Added to KEV
Mar 30, 2023
Remediation due
Apr 20, 2023 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-416
EPSS
2.6% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded