CVE-2023-4387

7.1 highEPSS 0.2%

High (7.1). EPSS 0.2% chance of exploitation in the next 30 days.

A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2023-08-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel
redhat:enterprise_linux

References

https://access.redhat.com/errata/RHSA-2022:7683
https://access.redhat.com/errata/RHSA-2022:8267
https://access.redhat.com/security/cve/CVE-2023-4387
https://bugzilla.redhat.com/show_bug.cgi?id=2219270
https://github.com/torvalds/linux/commit/9e7fef9521e73ca8afd7da9e58c14654b02dfad8

Check your stack JSON