CVE-2023-4732 - CVE House
Back to Database
Status published Medium CVE-2023-4732

Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h

Vulnerability Description

A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4732

Credits & Attribution

No credits recorded in the NVD database.

References

More from Red Hat

View All →
CVE-2025-9909
Aap-gateway: improper path validation in gateway allows credential exfiltration
Medium 6.7
CVE-2025-9908
Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams
Medium 6.7
CVE-2025-9907
Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda
Medium 6.7
CVE-2025-9901
Libsoup: improper handling of http vary header in libsoup caching
Medium 5.9
CVE-2025-9820
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
Medium 4

Affected Vendor

Affected Software

Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 9
Vulnerable Versions:
0:4.18.0-513.5.1.rt7.307.el8_9, 0:4.18.0-513.5.1.el8_9, 0:4.18.0-372.87.1.el8_6, 0:4.18.0-477.36.1.el8_8

Timeline

Official Publish: October 3rd, 2023
Last Modified: November 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-366

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.