Vulnerability
Linux Kernel Use-After-Free Vulnerability
Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.
Apply updates per vendor instructions.
CISA description: “Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.”
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:HLow exploitation likelihood — defer if no other signals fire.
No VEX statements published for CVE-2023-0266. Vendors publish VEX (Vulnerability Exploitability eXchange) to assert per-product whether a CVE is actually exploitable in their distribution.
Active exploitation with total impact on essential/support systems