Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22436

The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

Published

2023-03-10T11:15:12.220

Last Modified

2024-11-21T07:44:48.087

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-190
  • Type: Primary
    CWE-416
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System openatom openharmony ≤ 3.1.5 Yes
References