cve.bz

CVE-2023-2007

7.8 highEPSS 0.3%

High (7.8). EPSS 0.3% chance of exploitation in the next 30 days.

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWEs
CWE-667, CWE-367
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON