CVE-2023-4611

MEDIUM Year: 2023
CVSS v3 Score
6.3
Medium
Weakness Type
CWE-416
View all →

Vulnerability Description

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak.

Related Vulnerabilities

CVE-2016-5190

MEDIUM
CVSS:6.3(Medium)

Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bo...

CWE-4162016

CVE-2016-5215

MEDIUM
CVSS:6.3(Medium)

A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a cra...

CWE-4162016

CVE-2016-5216

MEDIUM
CVSS:6.3(Medium)

A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a craft...

CWE-4162016

CVE-2016-5219

MEDIUM
CVSS:6.3(Medium)

A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a craft...

CWE-4162016

CVE-2017-5019

MEDIUM
CVSS:6.3(Medium)

A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa...

CWE-4162017

CVE-2017-5038

MEDIUM
CVSS:6.3(Medium)

Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a craf...

CWE-4162017