CVE-2023-0030

Source
https://cve.org/CVERecord?id=CVE-2023-0030
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-0030.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-0030
Downstream
Published
2023-03-08T23:15:10.963Z
Modified
2026-02-25T09:15:35.592092269Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.

References

Affected packages

Git / github.com/torvalds/linux

Affected ranges

Type
GIT
Repo
https://github.com/torvalds/linux
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v2.*
v2.6.12
v2.6.12-rc2
v2.6.12-rc3
v2.6.12-rc4
v2.6.12-rc5
v2.6.12-rc6
v2.6.13
v2.6.13-rc1
v2.6.13-rc2
v2.6.13-rc3
v2.6.13-rc4
v2.6.13-rc5
v2.6.13-rc6
v2.6.13-rc7
v2.6.14
v2.6.14-rc1
v2.6.14-rc2
v2.6.14-rc3
v2.6.14-rc4
v2.6.14-rc5
v2.6.15
v2.6.15-rc1
v2.6.15-rc2
v2.6.15-rc3
v2.6.15-rc4
v2.6.15-rc5
v2.6.15-rc6
v2.6.15-rc7
v2.6.16
v2.6.16-rc1
v2.6.16-rc2
v2.6.16-rc3
v2.6.16-rc4
v2.6.16-rc5
v2.6.16-rc6
v2.6.17
v2.6.17-rc1
v2.6.17-rc2
v2.6.17-rc3
v2.6.17-rc4
v2.6.17-rc5
v2.6.17-rc6
v2.6.18
v2.6.18-rc1
v2.6.18-rc2
v2.6.18-rc3
v2.6.18-rc4
v2.6.18-rc5
v2.6.18-rc6
v2.6.18-rc7
v2.6.19
v2.6.19-rc1
v2.6.19-rc2
v2.6.19-rc3
v2.6.19-rc4
v2.6.19-rc5
v2.6.19-rc6
v2.6.20
v2.6.20-rc1
v2.6.20-rc2
v2.6.20-rc3
v2.6.20-rc4
v2.6.20-rc5
v2.6.20-rc6
v2.6.20-rc7
v2.6.21
v2.6.21-rc1
v2.6.21-rc2
v2.6.21-rc3
v2.6.21-rc4
v2.6.21-rc5
v2.6.21-rc6
v2.6.21-rc7
v2.6.22
v2.6.22-rc1
v2.6.22-rc2
v2.6.22-rc3
v2.6.22-rc4
v2.6.22-rc5
v2.6.22-rc6
v2.6.22-rc7
v2.6.23
v2.6.23-rc1
v2.6.23-rc2
v2.6.23-rc3
v2.6.23-rc4
v2.6.23-rc5
v2.6.23-rc6
v2.6.23-rc7
v2.6.23-rc8
v2.6.23-rc9
v2.6.24
v2.6.24-rc1
v2.6.24-rc2
v2.6.24-rc3
v2.6.24-rc4
v2.6.24-rc5
v2.6.24-rc6
v2.6.24-rc7
v2.6.24-rc8
v2.6.25
v2.6.25-rc1
v2.6.25-rc2
v2.6.25-rc3
v2.6.25-rc4
v2.6.25-rc5
v2.6.25-rc6
v2.6.25-rc7
v2.6.25-rc8
v2.6.25-rc9
v2.6.26
v2.6.26-rc1
v2.6.26-rc2
v2.6.26-rc3
v2.6.26-rc4
v2.6.26-rc5
v2.6.26-rc6
v2.6.26-rc7
v2.6.26-rc8
v2.6.26-rc9
v2.6.27
v2.6.27-rc1
v2.6.27-rc2
v2.6.27-rc3
v2.6.27-rc4
v2.6.27-rc5
v2.6.27-rc6
v2.6.27-rc7
v2.6.27-rc8
v2.6.27-rc9
v2.6.28
v2.6.28-rc1
v2.6.28-rc2
v2.6.28-rc3
v2.6.28-rc4
v2.6.28-rc5
v2.6.28-rc6
v2.6.28-rc7
v2.6.28-rc8
v2.6.28-rc9
v2.6.29
v2.6.29-rc1
v2.6.29-rc2
v2.6.29-rc3
v2.6.29-rc4
v2.6.29-rc5
v2.6.29-rc6
v2.6.29-rc7
v2.6.29-rc8
v2.6.30
v2.6.30-rc1
v2.6.30-rc2
v2.6.30-rc3
v2.6.30-rc4
v2.6.30-rc5
v2.6.30-rc6
v2.6.30-rc7
v2.6.30-rc8
v2.6.31
v2.6.31-rc1
v2.6.31-rc2
v2.6.31-rc3
v2.6.31-rc4
v2.6.31-rc5
v2.6.31-rc6
v2.6.31-rc7
v2.6.31-rc8
v2.6.31-rc9
v2.6.32
v2.6.32-rc1
v2.6.32-rc2
v2.6.32-rc3
v2.6.32-rc4
v2.6.32-rc5
v2.6.32-rc6
v2.6.32-rc7
v2.6.32-rc8
v2.6.33
v2.6.33-rc1
v2.6.33-rc2
v2.6.33-rc3
v2.6.33-rc4
v2.6.33-rc5
v2.6.33-rc6
v2.6.33-rc7
v2.6.33-rc8
v2.6.34
v2.6.34-rc1
v2.6.34-rc2
v2.6.34-rc3
v2.6.34-rc4
v2.6.34-rc5
v2.6.34-rc6
v2.6.34-rc7
v2.6.35
v2.6.35-rc1
v2.6.35-rc2
v2.6.35-rc3
v2.6.35-rc4
v2.6.35-rc5
v2.6.35-rc6
v2.6.36
v2.6.36-rc1
v2.6.36-rc2
v2.6.36-rc3
v2.6.36-rc4
v2.6.36-rc5
v2.6.36-rc6
v2.6.36-rc7
v2.6.36-rc8
v2.6.37
v2.6.37-rc1
v2.6.37-rc2
v2.6.37-rc3
v2.6.37-rc4
v2.6.37-rc5
v2.6.37-rc6
v2.6.37-rc7
v2.6.37-rc8
v2.6.38
v2.6.38-rc1
v2.6.38-rc2
v2.6.38-rc3
v2.6.38-rc4
v2.6.38-rc5
v2.6.38-rc6
v2.6.38-rc7
v2.6.38-rc8
v2.6.39
v2.6.39-rc1
v2.6.39-rc2
v2.6.39-rc3
v2.6.39-rc4
v2.6.39-rc5
v2.6.39-rc6
v2.6.39-rc7
v3.*
v3.0
v3.0-rc1
v3.0-rc2
v3.0-rc3
v3.0-rc4
v3.0-rc5
v3.0-rc6
v3.0-rc7
v3.1
v3.1-rc1
v3.1-rc10
v3.1-rc2
v3.1-rc3
v3.1-rc4
v3.1-rc5
v3.1-rc6
v3.1-rc7
v3.1-rc8
v3.1-rc9
v3.10
v3.10-rc1
v3.10-rc2
v3.10-rc3
v3.10-rc4
v3.10-rc5
v3.10-rc6
v3.10-rc7
v3.11
v3.11-rc1
v3.11-rc2
v3.11-rc3
v3.11-rc4
v3.11-rc5
v3.11-rc6
v3.11-rc7
v3.12
v3.12-rc1
v3.12-rc2
v3.12-rc3
v3.12-rc4
v3.12-rc5
v3.12-rc6
v3.12-rc7
v3.13
v3.13-rc1
v3.13-rc2
v3.13-rc3
v3.13-rc4
v3.13-rc5
v3.13-rc6
v3.13-rc7
v3.13-rc8
v3.14
v3.14-rc1
v3.14-rc2
v3.14-rc3
v3.14-rc4
v3.14-rc5
v3.14-rc6
v3.14-rc7
v3.14-rc8
v3.15
v3.15-rc1
v3.15-rc2
v3.15-rc3
v3.15-rc4
v3.15-rc5
v3.15-rc6
v3.15-rc7
v3.15-rc8
v3.16
v3.16-rc1
v3.16-rc2
v3.16-rc3
v3.16-rc4
v3.16-rc5
v3.16-rc6
v3.16-rc7
v3.17
v3.17-rc1
v3.17-rc2
v3.17-rc3
v3.17-rc4
v3.17-rc5
v3.17-rc6
v3.17-rc7
v3.18
v3.18-rc1
v3.18-rc2
v3.18-rc3
v3.18-rc4
v3.18-rc5
v3.18-rc6
v3.18-rc7
v3.19
v3.19-rc1
v3.19-rc2
v3.19-rc3
v3.19-rc4
v3.19-rc5
v3.19-rc6
v3.19-rc7
v3.2
v3.2-rc1
v3.2-rc2
v3.2-rc3
v3.2-rc4
v3.2-rc5
v3.2-rc6
v3.2-rc7
v3.3
v3.3-rc1
v3.3-rc2
v3.3-rc3
v3.3-rc4
v3.3-rc5
v3.3-rc6
v3.3-rc7
v3.4
v3.4-rc1
v3.4-rc2
v3.4-rc3
v3.4-rc4
v3.4-rc5
v3.4-rc6
v3.4-rc7
v3.5
v3.5-rc1
v3.5-rc2
v3.5-rc3
v3.5-rc4
v3.5-rc5
v3.5-rc6
v3.5-rc7
v3.6
v3.6-rc1
v3.6-rc2
v3.6-rc3
v3.6-rc4
v3.6-rc5
v3.6-rc6
v3.6-rc7
v3.7
v3.7-rc1
v3.7-rc2
v3.7-rc3
v3.7-rc4
v3.7-rc5
v3.7-rc6
v3.7-rc7
v3.7-rc8
v3.8
v3.8-rc1
v3.8-rc2
v3.8-rc3
v3.8-rc4
v3.8-rc5
v3.8-rc6
v3.8-rc7
v3.9
v3.9-rc1
v3.9-rc2
v3.9-rc3
v3.9-rc4
v3.9-rc5
v3.9-rc6
v3.9-rc7
v3.9-rc8
v4.*
v4.0
v4.0-rc1
v4.0-rc2
v4.0-rc3
v4.0-rc4
v4.0-rc5
v4.0-rc6
v4.0-rc7
v4.1
v4.1-rc1
v4.1-rc2
v4.1-rc3
v4.1-rc4
v4.1-rc5
v4.1-rc6
v4.1-rc7
v4.1-rc8
v4.10
v4.10-rc1
v4.10-rc2
v4.10-rc3
v4.10-rc4
v4.10-rc5
v4.10-rc6
v4.10-rc7
v4.10-rc8
v4.11
v4.11-rc1
v4.11-rc2
v4.11-rc3
v4.11-rc4
v4.11-rc5
v4.11-rc6
v4.11-rc7
v4.11-rc8
v4.12
v4.12-rc1
v4.12-rc2
v4.12-rc3
v4.12-rc4
v4.12-rc5
v4.12-rc6
v4.12-rc7
v4.13
v4.13-rc1
v4.13-rc2
v4.13-rc3
v4.13-rc4
v4.13-rc5
v4.13-rc6
v4.13-rc7
v4.14
v4.14-rc1
v4.14-rc2
v4.14-rc3
v4.14-rc4
v4.14-rc5
v4.14-rc6
v4.14-rc7
v4.14-rc8
v4.15
v4.15-rc1
v4.15-rc2
v4.15-rc3
v4.15-rc4
v4.15-rc5
v4.15-rc6
v4.15-rc7
v4.15-rc8
v4.15-rc9
v4.16
v4.16-rc1
v4.16-rc2
v4.16-rc3
v4.16-rc4
v4.16-rc5
v4.16-rc6
v4.16-rc7
v4.17
v4.17-rc1
v4.17-rc2
v4.17-rc3
v4.17-rc4
v4.17-rc5
v4.17-rc6
v4.17-rc7
v4.18
v4.18-rc1
v4.18-rc2
v4.18-rc3
v4.18-rc4
v4.18-rc5
v4.18-rc6
v4.18-rc7
v4.18-rc8
v4.19
v4.19-rc1
v4.19-rc2
v4.19-rc3
v4.19-rc4
v4.19-rc5
v4.19-rc6
v4.19-rc7
v4.19-rc8
v4.2
v4.2-rc1
v4.2-rc2
v4.2-rc3
v4.2-rc4
v4.2-rc5
v4.2-rc6
v4.2-rc7
v4.2-rc8
v4.20-rc1
v4.20-rc2
v4.20-rc3
v4.20-rc4
v4.3
v4.3-rc1
v4.3-rc2
v4.3-rc3
v4.3-rc4
v4.3-rc5
v4.3-rc6
v4.3-rc7
v4.4
v4.4-rc1
v4.4-rc2
v4.4-rc3
v4.4-rc4
v4.4-rc5
v4.4-rc6
v4.4-rc7
v4.4-rc8
v4.5
v4.5-rc1
v4.5-rc2
v4.5-rc3
v4.5-rc4
v4.5-rc5
v4.5-rc6
v4.5-rc7
v4.6
v4.6-rc1
v4.6-rc2
v4.6-rc3
v4.6-rc4
v4.6-rc5
v4.6-rc6
v4.6-rc7
v4.7
v4.7-rc1
v4.7-rc2
v4.7-rc3
v4.7-rc4
v4.7-rc5
v4.7-rc6
v4.7-rc7
v4.8
v4.8-rc1
v4.8-rc2
v4.8-rc3
v4.8-rc4
v4.8-rc5
v4.8-rc6
v4.8-rc7
v4.8-rc8
v4.9
v4.9-rc1
v4.9-rc2
v4.9-rc3
v4.9-rc4
v4.9-rc5
v4.9-rc6
v4.9-rc7
v4.9-rc8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-0030.json"
vanir_signatures
[
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "digest": {
            "function_hash": "333379605788497555659372757524634126576",
            "length": 2080.0
        },
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/uvmm.c",
            "function": "nvkm_uvmm_mthd_map"
        },
        "id": "CVE-2023-0030-09747ad2",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "243584790066952512441839506610317205406",
            "length": 1217.0
        },
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "id": "CVE-2023-0030-1d2f9c6a",
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c",
            "function": "nvkm_vmm_put_locked"
        },
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2023-0030-2b4d113d",
        "deprecated": false,
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "146219161058040402667526220848861907232",
                "203984407650585660635998553109014700623",
                "58479015757359748721197556664070741224",
                "15134164172455415757389719885196714334",
                "248593489454556539429370285572461110866",
                "129058139594238883780441799756112669381",
                "246443956343022666959811920852786893381",
                "169278357004918758100572477005047875382",
                "105997533469116140536249336343707598202",
                "233450372273202730344086713453051776127",
                "4011369782906016215365285558966712769",
                "225575778414085252775054321785078113876",
                "174483344776492593994921025303275472734",
                "104962856776802156772444049980397260062",
                "192271675046291761243465656723170810969",
                "282746450997147125062334787450054709355",
                "161190333772908478177597516502569570041",
                "322128087571684760209271297140742875522",
                "267826537517380419981920317338800907454"
            ]
        },
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/uvmm.c"
        },
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "id": "CVE-2023-0030-5e1ae1b7",
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "86007739817378988929094187807815580245",
                "248437039319069000811561688651887871579",
                "182525125671008239222280728902470335975",
                "278962994578115469469558488632326905340",
                "1301281030405570252155749828370117774",
                "95842061974005290381394239574102394139",
                "301994265728211805254247655644202659553",
                "304137058373429640791063235469575057471"
            ]
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "digest": {
            "function_hash": "55997795687599138009793365259095733803",
            "length": 518.0
        },
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c",
            "function": "nvkm_vmm_put_region"
        },
        "id": "CVE-2023-0030-75ebb998",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2023-0030-bfe01f21",
        "deprecated": false,
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "digest": {
            "function_hash": "329868726931002574620580945715826185904",
            "length": 3059.0
        },
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c",
            "function": "nvkm_vmm_get_locked"
        },
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2023-0030-c130d80f",
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "digest": {
            "function_hash": "285720089186736027684374296451801488765",
            "length": 452.0
        },
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c",
            "function": "nvkm_vmm_node_insert"
        },
        "signature_type": "Function",
        "deprecated": false
    },
    {
        "deprecated": false,
        "id": "CVE-2023-0030-e8a2eefa",
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "signature_type": "Function",
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c",
            "function": "nvkm_vmm_unmap_region"
        },
        "digest": {
            "function_hash": "162038495184351605845112351452263164455",
            "length": 637.0
        },
        "signature_version": "v1"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2023-0030-fdd08063",
        "source": "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "227038474926947785380586565857139224395",
                "72949035494631525249405182731779436177",
                "270892449868884668255773791095407543387",
                "148553710729942468800921850010230286999",
                "30869167905364008882642406850706897483",
                "20443021843448814566406881444585417722",
                "282399272622528362424901220898520936488",
                "232690129283353870541609992434752636247",
                "270383451259007692435086064904363998690",
                "184943781299529236533576619764700010747",
                "24741388425287865969895319965061344236",
                "54621360719937835777907771534238803227",
                "74309840133940634865929772755704543178",
                "161528239766424300874124159040819236673",
                "27478058206470966450297782834259731508",
                "158669923395208292594727148836023013757",
                "122984634557350873108712301428332123605",
                "39192181091310832397129741649994366331",
                "110441282775200165150573398659441957379",
                "93523763361161981007874280275401319891",
                "283815450826155846827882080389613919444",
                "321579713304376673238615272793677180802",
                "237670334495978819337731209746094185603",
                "147687042339393247634252080246020460569",
                "17843410705568468399362421361824354544",
                "52768372528019638137405101284508245619",
                "268413958789217842984137300693164855303",
                "219719195651290898017814593369742672181",
                "6410695201936886256978472338113089291",
                "332531541832205874653824003932285114801",
                "185649654341890203310402440306189387129",
                "202092420388594841081734331924014342015",
                "256326185484083518808336462546413691166",
                "38551709888439802703514974366368376331",
                "237515913013927218387714188501491427256",
                "86864293742449560887501087304547618428",
                "279451242866930391677814596594495552233",
                "111708766549982062342636204382193101079",
                "14555602491661927534492625614055371239",
                "7186989137912959250886237945624512578",
                "291104906790838702039802213669536441",
                "240934335224188348401436164826553663246",
                "84407649030563334509472505688056795692",
                "73941479221140800325674367427559962712",
                "104531228474858559704705616069333166103",
                "212865293692803462886117417725922581199",
                "175343121113829078510939372818830072126",
                "260104588830554479360742282896450726548",
                "51393859646000551434710355109584133955",
                "206746237952186969794940577710903039618",
                "106920685837307411603313773488894135302",
                "95224243326688833981973957451222322368",
                "223908651013822488298223880531042670120",
                "226546472124937174615154097104382423731",
                "129006516867402064632896936517136610395",
                "63794968491956972845765911828102605535",
                "233288784310092160614467525119971754768",
                "149180919443893817545907032205767942588",
                "292535097747912064950479031847763779550",
                "55030742344355830615823835649989318114",
                "88424644029098809982637408936689012223"
            ]
        },
        "target": {
            "file": "drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c"
        },
        "signature_type": "Line",
        "deprecated": false
    }
]