CVE-2023-4394

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information

• CWE-400
• CWE-416

• https://access.redhat.com/security/cve/CVE-2023-4394Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2219263Issue Tracking, Patch, Third Party Advisory
• https://patchwork.kernel.org/project/linux-btrfs/patch/20220815151606.3479183-1-r33s3n6@gmail.com/Mailing List, Patch, Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-4394Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2219263Issue Tracking, Patch, Third Party Advisory
• https://patchwork.kernel.org/project/linux-btrfs/patch/20220815151606.3479183-1-r33s3n6@gmail.com/Mailing List, Patch, Vendor Advisory

Published

Aug 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-43905Incorrect access control in writercms v1.1.0 allows attacker…7.5
• CVE-2023-43906Xolo CMS v0.11 was discovered to contain a reflected cross-s…6.1
• CVE-2023-43907OptiPNG v0.7.7 was discovered to contain a global buffer ove…7.8
• CVE-2023-43909Hospital Management System thru commit 4770d was discovered …9.1
• CVE-2023-4392A vulnerability was found in Control iD Gerencia Web 1.30 an…5.3
• CVE-2023-4393HTML and SMTP injections on the registration page of LiquidF…6.1
• CVE-2023-43944A Stored Cross Site Scripting (XSS) vulnerability was found …5.4
• CVE-2023-4395Cross-site Scripting (XSS) - Stored in GitHub repository coc…5.4
• CVE-2023-43951SSCMS 7.2.2 was discovered to contain a cross-site scripting…5.4
• CVE-2023-43952SSCMS 7.2.2 was discovered to contain a stored cross-site sc…5.4
• CVE-2023-43953SSCMS 7.2.2 was discovered to contain a cross-site scripting…5.4
• CVE-2023-43955The com.phlox.tvwebbrowser TV Bro application through 2.0.0 …9.8