{"id":"CVE-2023-35829","published":"2023-06-18T00:00:00Z","modified":"2024-08-02T16:30:45Z","title":"An issue was discovered in the Linux kernel before 6.3.2","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.00427,"percentile":0.36875,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":2,"pulses":[{"name":"September 27th, 2023 - CryptoGen Cyber Threat Intelligence Advisory #3306 - Sony Investigating After Hackers Offer to Sell Stolen Data","url":"https://otx.alienvault.com/pulse/6513c1e7908e8d033c538316","created":"2023-09-27"},{"name":"Threat Intel Report - W29-2023","url":"https://otx.alienvault.com/pulse/64b50debf234234202ce2f7c","created":"2023-07-17"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2","tags":[]},{"url":"https://lore.kernel.org/all/a4dafa22-3ee3-dbe1-fd50-fee07883ce1a%40xs4all.nl/","tags":[]},{"url":"https://lore.kernel.org/lkml/20230307173900.1299387-1-zyytlz.wz%40163.com/T/","tags":[]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3228cec23b8b29215e18090c6ba635840190993d","tags":[]},{"url":"https://security.netapp.com/advisory/ntap-20230803-0002/","tags":[]}],"techniques":[],"reports":[{"id":"SRC-bf1b3fd29c4a38dbdb8c","title":"Picus-RedReport-2024","publisher":"picussecurity.com","url":"https://www.picussecurity.com/hubfs/Red%20Report%202024/Picus-RedReport-2024.pdf","date":null,"mentions":[{"quote":"This fake PoC masquerades as a high-severity use-after-free exploit (CVE-2023-35829)","start":129957,"end":130041}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-39824","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39824","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-06-18","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-35829","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":12.3,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":7.38,"detail":"percentile 0.3688"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}