CVE-2023-4394
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A use-after-free flaw was found in btrfs_get_dev_args_from_path in the btrfs file system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information.
Risk Assessment
This vulnerability poses a risk of system crashes and potential leakage of sensitive information, which could lead to further attacks on IT infrastructure.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information