CVE-2023-1990 Report - Details, Severity, & Advisories
Twingate Team
•
Apr 11, 2024
CVE-2023-1990 is a medium-severity vulnerability found in the Linux Kernel, specifically affecting the st-nci NFC adapter driver. This use-after-free flaw, discovered by Zheng Wang, could potentially lead to system crashes due to a race condition. Systems running the Linux Kernel may be impacted by this vulnerability. However, the security impact remains unclear, and the driver is not enabled in some official kernel configurations, such as Debian's.
How do I know if I'm affected?
If you're using the Linux Kernel, you might be affected by the vulnerability. This issue impacts all versions up to (excluding) 6.3, as well as versions 6.3 rc1 and rc2. To know if you're affected, check your Linux Kernel version. Keep in mind that some official kernel configurations, like Debian's, may not have the vulnerable driver enabled. If you're using an Apple product, there's no information available about affected versions related to this vulnerability.
What should I do if I'm affected?
If you're affected by the vulnerability, it's important to update your Linux Kernel to a version that addresses the issue. For Debian users, upgrade your Linux-5.10 packages to version 5.10.178-3~deb10u1 or your Linux packages to version 4.19.282-1. Always keep your system updated with the latest patches to stay protected from known vulnerabilities.
Is CVE-2023-1990 in CISA’s Known Exploited Vulnerabilities Catalog?
The CVE-2023-1990 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This use-after-free flaw in the Linux Kernel's st-nci NFC adapter driver could potentially lead to system crashes due to a race condition. It's important to update your Linux Kernel to a version that addresses the issue and stay informed about related advisories and solutions.
Weakness enumeration
The weakness enumeration for this vulnerability is categorized as CWE-416, which is a use-after-free issue in the Linux Kernel's NFC driver caused by a race condition. Updating your system can help prevent potential crashes.
For more details
CVE-2023-1990 is a medium-severity vulnerability in the Linux Kernel's NFC driver, with potential consequences such as system crashes. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and affected software configurations, refer to the NVD page or the links below.
Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.
CVE-2023-1990 Report - Details, Severity, & Advisories
Twingate Team
•
Apr 11, 2024
CVE-2023-1990 is a medium-severity vulnerability found in the Linux Kernel, specifically affecting the st-nci NFC adapter driver. This use-after-free flaw, discovered by Zheng Wang, could potentially lead to system crashes due to a race condition. Systems running the Linux Kernel may be impacted by this vulnerability. However, the security impact remains unclear, and the driver is not enabled in some official kernel configurations, such as Debian's.
How do I know if I'm affected?
If you're using the Linux Kernel, you might be affected by the vulnerability. This issue impacts all versions up to (excluding) 6.3, as well as versions 6.3 rc1 and rc2. To know if you're affected, check your Linux Kernel version. Keep in mind that some official kernel configurations, like Debian's, may not have the vulnerable driver enabled. If you're using an Apple product, there's no information available about affected versions related to this vulnerability.
What should I do if I'm affected?
If you're affected by the vulnerability, it's important to update your Linux Kernel to a version that addresses the issue. For Debian users, upgrade your Linux-5.10 packages to version 5.10.178-3~deb10u1 or your Linux packages to version 4.19.282-1. Always keep your system updated with the latest patches to stay protected from known vulnerabilities.
Is CVE-2023-1990 in CISA’s Known Exploited Vulnerabilities Catalog?
The CVE-2023-1990 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This use-after-free flaw in the Linux Kernel's st-nci NFC adapter driver could potentially lead to system crashes due to a race condition. It's important to update your Linux Kernel to a version that addresses the issue and stay informed about related advisories and solutions.
Weakness enumeration
The weakness enumeration for this vulnerability is categorized as CWE-416, which is a use-after-free issue in the Linux Kernel's NFC driver caused by a race condition. Updating your system can help prevent potential crashes.
For more details
CVE-2023-1990 is a medium-severity vulnerability in the Linux Kernel's NFC driver, with potential consequences such as system crashes. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and affected software configurations, refer to the NVD page or the links below.
Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.
CVE-2023-1990 Report - Details, Severity, & Advisories
Twingate Team
•
Apr 11, 2024
CVE-2023-1990 is a medium-severity vulnerability found in the Linux Kernel, specifically affecting the st-nci NFC adapter driver. This use-after-free flaw, discovered by Zheng Wang, could potentially lead to system crashes due to a race condition. Systems running the Linux Kernel may be impacted by this vulnerability. However, the security impact remains unclear, and the driver is not enabled in some official kernel configurations, such as Debian's.
How do I know if I'm affected?
If you're using the Linux Kernel, you might be affected by the vulnerability. This issue impacts all versions up to (excluding) 6.3, as well as versions 6.3 rc1 and rc2. To know if you're affected, check your Linux Kernel version. Keep in mind that some official kernel configurations, like Debian's, may not have the vulnerable driver enabled. If you're using an Apple product, there's no information available about affected versions related to this vulnerability.
What should I do if I'm affected?
If you're affected by the vulnerability, it's important to update your Linux Kernel to a version that addresses the issue. For Debian users, upgrade your Linux-5.10 packages to version 5.10.178-3~deb10u1 or your Linux packages to version 4.19.282-1. Always keep your system updated with the latest patches to stay protected from known vulnerabilities.
Is CVE-2023-1990 in CISA’s Known Exploited Vulnerabilities Catalog?
The CVE-2023-1990 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This use-after-free flaw in the Linux Kernel's st-nci NFC adapter driver could potentially lead to system crashes due to a race condition. It's important to update your Linux Kernel to a version that addresses the issue and stay informed about related advisories and solutions.
Weakness enumeration
The weakness enumeration for this vulnerability is categorized as CWE-416, which is a use-after-free issue in the Linux Kernel's NFC driver caused by a race condition. Updating your system can help prevent potential crashes.
For more details
CVE-2023-1990 is a medium-severity vulnerability in the Linux Kernel's NFC driver, with potential consequences such as system crashes. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and affected software configurations, refer to the NVD page or the links below.