7.1

CVE-2023-4881: linux

CVSS: 7.1v3.1HighRejected
AliasesUBUNTU-CVE-2023-4881openSUSE-SU-2024:13245-1
Published 11-09-2023Last modified 20-09-2023
Open JSON

Vulnerability summary

CVE-2023-4881 is a high (CVSS 7.1) vulnerability in linux.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (OSV · Ubuntu), selected by version preference
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 40 · Related 43
LSN-0099-1OPENSUSE-SU-2024:13704-1SUSE-SU-2023:3988-1SUSE-SU-2023:4030-1SUSE-SU-2023:4031-1SUSE-SU-2023:4032-1

Timeline

  1. 11-09-2023
    PublishedVulnerability first disclosed.
  2. 20-09-2023
    Last modifiedVulnerability information updated.

Description

Rejected reason: CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu98 products
  • linux< 4.4.0-246.280 | < 4.15.0-219.230 | < 5.4.0-165.182 | < 5.15.0-87.97
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1124.130 | < 4.4.0-1162.177 | < 4.15.0-1162.175 | < 5.4.0-1112.121 | < 5.15.0-1048.53
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Opensuse1 product
  • kernel-source&distro=openSUSE Tumbleweed< 6.5.4-1.1

2 vendors · 99 products

References

28 links
Show all 28 references