What is CVE-2023-2007?

CVE-2023-2007 is a high-severity vulnerability in Linux Linux_kernel, classified under Time-of-check Time-of-use (TOCTOU) Race Condition. CVSS score: 7.8/10. Published 2023-04-24.

How severe is CVE-2023-2007?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux Linux_kernel

CVE-2023-2007

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate p…

Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)

EPSS: 0.003 (20.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

secalert@redhat.com (Patch)
secalert@redhat.com (mailing-list, Mailing List, Third Party Advisory)
secalert@redhat.com (vendor-advisory, Third Party Advisory)
secalert@redhat.com (mailing-list, Mailing List, Third Party Advisory)
secalert@redhat.com (Third Party Advisory)

Frequently asked questions

What is CVE-2023-2007?: CVE-2023-2007 is a high-severity vulnerability in Linux Linux_kernel, classified under Time-of-check Time-of-use (TOCTOU) Race Condition. CVSS score: 7.8/10. Published 2023-04-24.
How severe is CVE-2023-2007?: High severity. CVSS v3 base score is 7.8 out of 10.