CVE-2023-3269

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.

• CWE-416
• CWE-416

• http://seclists.org/fulldisclosure/2023/Jul/43Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/07/28/1Mailing List
• http://www.openwall.com/lists/oss-security/2023/08/25/1Mailing List
• http://www.openwall.com/lists/oss-security/2023/08/25/4Mailing List
• https://access.redhat.com/security/cve/CVE-2023-3269Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2215268Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230908-0001/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/07/05/1Mailing List
• http://seclists.org/fulldisclosure/2023/Jul/43Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/07/28/1Mailing List
• http://www.openwall.com/lists/oss-security/2023/08/25/1Mailing List
• http://www.openwall.com/lists/oss-security/2023/08/25/4Mailing List
• https://access.redhat.com/security/cve/CVE-2023-3269Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2215268Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230908-0001/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/07/05/1Mailing List

Published

Jul 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32684Lima launches Linux virtual machines, typically on macOS, fo…2.5
• CVE-2023-32685Kanboard is project management software that focuses on the …5.4
• CVE-2023-32686Kiwi TCMS is an open source test management system for both …5.4
• CVE-2023-32687tgstation-server is a toolset to manage production BYOND ser…6.5
• CVE-2023-32688parse-server-push-adapter is the official Push Notification …7.5
• CVE-2023-32689Parse Server is an open source backend that can be deployed …6.5
• CVE-2023-32690libspdm is a sample implementation that follows the DMTF SPD…7.5
• CVE-2023-32691gost (GO Simple Tunnel) is a simple tunnel written in golang…5.9
• CVE-2023-32692CodeIgniter is a PHP full-stack web framework. This vulnerab…9.8
• CVE-2023-32693Decidim is a participatory democracy framework, written in R…6.1
• CVE-2023-32694Saleor Core is a composable, headless commerce API. Saleor's…5.4
• CVE-2023-32695socket.io parser is a socket.io encoder and decoder written …7.5