ReviewHigh

CVE-2023-35823

linux kernel, debian linux

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.

PRIORITY ASSESSMENT

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.20%

Technical severityCVSS 7

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.

Product: linux kernel, debian linux
Affected versions: >= 4.15 < 4.19.283, >= 4.20 < 5.4.243, >= 5.5 < 5.10.180, >= 5.11 < 5.15.111, >= 5.16 < 6.1.28, >= 6.2 < 6.2.15, >= 6.3 < 6.3.2, 10.0
Fixed versions: 4.19.283, 5.4.243, 5.10.180, 5.15.111, 6.1.28, 6.2.15, 6.3.2

Confirm exposure before applying a vendor-supported change.

1
Identify
Confirm that linux kernel, debian linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.