https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 16:41:39 +0000 https://vulnerability.circl.lu/vuln/cve-2023-52837 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nbd: fix uaf in nbd_open</p> <p>Commit 4af5f2e03013 (&#34;nbd: use blk_mq_alloc_disk and blk_cleanup_disk&#34;) cleans up disk by blk_cleanup_disk() and it won&#39;t set disk-&gt;private_data as NULL as before. UAF may be triggered in nbd_open() if someone tries to open nbd device right after nbd_put() since nbd has been free in nbd_dev_remove().</p> <p>Fix this by implementing -&gt;free_disk and free private data in it.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nbd: fix uaf in nbd_open</p> <p>Commit 4af5f2e03013 (&#34;nbd: use blk_mq_alloc_disk and blk_cleanup_disk&#34;) cleans up disk by blk_cleanup_disk() and it won&#39;t set disk-&gt;private_data as NULL as before. UAF may be triggered in nbd_open() if someone tries to open nbd device right after nbd_put() since nbd has been free in nbd_dev_remove().</p> <p>Fix this by implementing -&gt;free_disk and free private data in it.</p> https://vulnerability.circl.lu/vuln/cve-2023-52837