CVE-2023-7258

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-7258
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-7258.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-7258
Downstream
Published
2024-05-15T16:29:08Z
Modified
2026-09-30T08:14:07Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Denial-of-Service in Gvisor
Details

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permission to mount volumes to kill the sandbox. We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6

Database specific 
{
    "cna_assigner": "Google",
    "cwe_ids": [
        "CWE-400"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/7xxx/CVE-2023-7258.json"
}
References

Affected packages

Git / github.com/google/gvisor

Affected ranges

Type
GIT
Repo
https://github.com/google/gvisor
Events
Introduced
0b983ff832b175e406f4f9b1a3868457bb1ceb7b
Fixed
6a112c60a257dadac59962e0bc9e9b5aee70b5b6

Affected versions

release-20221026.*
release-20221026.0
release-20221102.*
release-20221102.1
release-20221107.*
release-20221107.0
release-20221122.*
release-20221122.0
release-20221128.*
release-20221128.0
release-20221205.*
release-20221205.0
release-20221212.*
release-20221212.0
release-20221219.*
release-20221219.0
release-20230102.*
release-20230102.0
release-20230109.*
release-20230109.0
release-20230118.*
release-20230118.0
release-20230123.*
release-20230123.0
release-20230130.*
release-20230130.0
release-20230214.*
release-20230214.0
release-20230227.*
release-20230227.0
release-20230306.*
release-20230306.0
release-20230313.*
release-20230313.0
release-20230320.*
release-20230320.0
release-20230327.*
release-20230327.0
release-20230417.*
release-20230417.0
release-20230501.*
release-20230501.0
release-20230508.*
release-20230508.0
release-20230517.*
release-20230517.0
release-20230522.*
release-20230522.0
release-20230529.*
release-20230529.0
release-20230605.*
release-20230605.0
release-20230621.*
release-20230621.0
release-20230627.*
release-20230627.0
release-20230710.*
release-20230710.0
release-20230717.*
release-20230717.0
release-20230724.*
release-20230724.0
release-20230731.*
release-20230731.0
release-20230801.*
release-20230801.0
release-20230807.*
release-20230807.0
release-20230814.*
release-20230814.0
release-20230823.*
release-20230823.0
release-20230904.*
release-20230904.0
release-20230911.*
release-20230911.0
release-20230920.*
release-20230920.0
release-20230925.*
release-20230925.0
release-20231003.*
release-20231003.0
release-20231009.*
release-20231009.0
release-20231016.*
release-20231016.0
release-20231023.*
release-20231023.0
release-20231030.*
release-20231030.0
release-20231106.*
release-20231106.0
release-20231113.*
release-20231113.0
release-20231120.*
release-20231120.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-7258.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "269802285469074608123542573705608135095",
                "15643295923371110299552405570464642109",
                "30707538532061579888770222677221965848",
                "140833348707707780581757800415215888964",
                "311327337334935848450225604739890492340",
                "228271758042552947232133433063952989862",
                "168102985027651801616458849826001019691",
                "95541713137360941677230737423589630070",
                "328970649726918352133359352452513874559",
                "108587633537507210242609878158511307392"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-7258-8c75cc02",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/google/gvisor/commit/6a112c60a257dadac59962e0bc9e9b5aee70b5b6",
        "target": {
            "file": "test/syscalls/linux/mount.cc"
        }
    }
]
vanir_signatures_modified 
"2026-09-30T08:14:07Z"