CVE-2023-2007
linux: The specific flaw exists within the DPT I2O Controller driver
CVE-2023-2007 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-2007, released April 24, 2023. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0028
20th percentile
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| linux · Debian 12.15 (bookworm) | 6.0.2-1 | DEBIAN-CVE-2023-2007 | Apr 24, 2023 |
| linux · Debian 13.5 (trixie) | 6.0.2-1 | DEBIAN-CVE-2023-2007 | Apr 24, 2023 |
| linux · Debian 14 | 6.0.2-1 | DEBIAN-CVE-2023-2007 | Apr 24, 2023 |