Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2023-3567— Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

Quick assessment

Affected

Red Hat Red Hat Enterprise Linux 8

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在资源管理错误漏洞，该漏洞源于vcs_read存在释放后重用漏洞。攻击者可利用该漏洞造成系统崩溃或泄露内核信息。

CVSS 7.1 · High EPSS 0.42% · P34 Updated Feb 26, 2026

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-3567

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

Source: CVE Program / CVE List V5

Vulnerability Description

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

释放后使用

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 资源管理错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Red Hat Enterprise Linux 8	0:4.18.0-553.rt7.342.el8_10 ~ *	`cpe:/a:redhat:enterprise_linux:8::realtime`
Red Hat	Red Hat Enterprise Linux 8	0:4.18.0-553.el8_10 ~ *	`cpe:/a:redhat:enterprise_linux:8::crb`
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	0:4.18.0-372.87.1.el8_6 ~ *	`cpe:/o:redhat:rhev_hypervisor:4.4::el8`
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	0:4.18.0-477.43.1.el8_8 ~ *	`cpe:/o:redhat:rhel_eus:8.8::baseos`
Red Hat	Red Hat Enterprise Linux 9	0:5.14.0-427.13.1.el9_4 ~ *	`cpe:/a:redhat:enterprise_linux:9::crb`
Red Hat	Red Hat Enterprise Linux 9	0:5.14.0-427.13.1.el9_4 ~ *	`cpe:/a:redhat:enterprise_linux:9::crb`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	0:5.14.0-70.85.1.el9_0 ~ *	`cpe:/o:redhat:rhel_eus:9.0::baseos`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	0:5.14.0-70.85.1.rt21.156.el9_0 ~ *	`cpe:/a:redhat:rhel_eus:9.0::realtime`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	0:5.14.0-284.48.1.el9_2 ~ *	`cpe:/a:redhat:rhel_eus:9.2::appstream`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	0:5.14.0-284.48.1.rt14.333.el9_2 ~ *	`cpe:/a:redhat:rhel_eus:9.2::nfv`
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	0:4.18.0-372.87.1.el8_6 ~ *	`cpe:/o:redhat:rhev_hypervisor:4.4::el8`
Red Hat	Red Hat Enterprise Linux 6	-	`cpe:/o:redhat:enterprise_linux:6`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:enterprise_linux:7`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:enterprise_linux:7`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/o:redhat:enterprise_linux:9`

II. Public POCs for CVE-2023-3567

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2023-3567

请登录查看更多情报信息。

Vendor Advisories for CVE-2023-3567 (10)

https://access.redhat.com/security/cve/CVE-2023-3567 vdb-entry x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0439 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0432 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0412 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0431 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0448 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2394 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0575 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950 vendor-advisory x_refsource_REDHAT

Exploits & Public PoCs for CVE-2023-3567 (2)

Other References for CVE-2023-3567 (1)

https://www.spinics.net/lists/stable-commits/msg285184.html

https://www.cve.org/CVERecord?id=CVE-2023-3567

Same Patch Batch · Red Hat · 2023-07-24 · 10 CVEs total

CVE-2023-3812	7.8 HIGH	Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
CVE-2023-38200	7.5 HIGH	Keylime: registrar is subject to a dos against ssl connections
CVE-2023-3640	7.0 HIGH	Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets func
CVE-2023-33952	6.7 MEDIUM	Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects
CVE-2023-33951	6.7 MEDIUM	Kernel: vmwgfx: race condition leading to information disclosure vulnerability
CVE-2023-3750	6.5 MEDIUM	Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
CVE-2023-3019	6.0 MEDIUM	Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
CVE-2023-3745	5.5 MEDIUM	Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h
CVE-2023-3384	5.4 MEDIUM	Quay: stored cross site scripting

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux 8

Same vendor: Red Hat

Same weakness: CWE-416

V. Comments for CVE-2023-3567

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2023-3567— Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2023-3567

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2023-3567

III. Intelligence Information for CVE-2023-3567

Vendor Advisories for CVE-2023-3567 (10)

Exploits & Public PoCs for CVE-2023-3567 (2)

Other References for CVE-2023-3567 (1)

Same Patch Batch · Red Hat · 2023-07-24 · 10 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2023-3567

Leave a comment