Vulnerability DatabaseCVE-2023-3863
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2023-3863
Published:July 24, 2023
Updated:May 18, 2026
A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.
Affected Packages
linux-libc-headers (YOCTO):
Affected version(s) >=5.4 <5.14
Fix Suggestion:
Update to version 5.14
linux-yocto (YOCTO):
Affected version(s) =4.9.3+gitAUTOINC+03a2d3f7f9_881cba95ae <4.10+gitAUTOINC+805ea440c7_b259a5d744
Fix Suggestion:
Update to version 4.10+gitAUTOINC+805ea440c7_b259a5d744
linux-yocto (YOCTO):
Affected version(s) >=4.8 <4.8.26+gitAUTOINC+1c60e003c7_27efc3ba68
Fix Suggestion:
Update to version 4.8.26+gitAUTOINC+1c60e003c7_27efc3ba68
Related Resources (8)
https://security.netapp.com/advisory/ntap-20240202-0002/
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
https://www.debian.org/security/2023/dsa-5480
https://bugzilla.redhat.com/show_bug.cgi?id=2225126
https://people.canonical.com/~ubuntu-security/cve/CVE-2023-3863
https://www.debian.org/security/2023/dsa-5492
https://github.com/torvalds/linux/commit/6709d4b7bc2e079241fdef15d1160581c5261c10
https://access.redhat.com/security/cve/CVE-2023-3863
Do you need more information?
Contact Us
CVSS v4
Base Score:
7.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
HIGH
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
6.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Use After Free
CWE-416
EPSS
Base Score:
0.01