How severe is CVE-2023-4389?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.1 out of 10.

What type of vulnerability is CVE-2023-4389?

This is classified as CWE-415, which is a common weakness in software security.

CVE-2023-4389 - HIGH Severity | CVSS 7.1

Vulnerability Description

A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information.

Related Vulnerabilities

CVE-2019-0122

HIGH

CVSS:7.1(High)

Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial ...

CWE-4152019

CVE-2020-5988

HIGH

CVSS:7.1(High)

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU v...

CWE-4152020

CVE-2021-1119

HIGH

CVSS:7.1(High)

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service. This flaw may result in a write-what-wh...

CWE-4152021

CVE-2021-28041

HIGH

CVSS:7.1(High)

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an a...

CWE-4152021

CVE-2024-36030

HIGH

CVSS:7.1(High)

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvu_npc_freemem() Clang static checker(scan-build) warning： drivers/net/ethernet/marvell/octeon...

CWE-4152024

CVE-2017-10950

HIGH

CVSS:7.0(High)

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privi...

CWE-4152017