CVE-2023-2007
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an obje...
Original description
The description as published by the source.
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-2007 linux Fixed in: 5.10.191-1
- Ubuntu UBUNTU-CVE-2023-2007 linux
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory debian.org
- patch github.com
- web lists.debian.org
- web lists.debian.org