{"timestamp":"2025-03-06T15:56:40.711421Z","id":"CVE-2023-23005","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476

https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2

https://github.com/torvalds/linux/commit/4a625ceee8a0ab0273534cb6b432ce6b331db5ee

MITRE disputed

** DISPUTED ** In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached.

In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached.

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST CWE-476

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 6.2

OR
     *cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:*:*:*:*

https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2 No Types Assigned

https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2 Issue Tracking, Patch, Third Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2 No Types Assigned

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2 Mailing List, Patch, Release Notes

https://github.com/torvalds/linux/commit/4a625ceee8a0ab0273534cb6b432ce6b331db5ee No Types Assigned

https://github.com/torvalds/linux/commit/4a625ceee8a0ab0273534cb6b432ce6b331db5ee Patch

In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

** DISPUTED ** In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached.

https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2 [No Types Assigned]