Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.9

Oracle Linux SMU Integer Overflow Allows Privilege Escalation

CVE-2023-31365 · published 1 year ago
Summary

A critical issue in Oracle Linux's SMU (Service Management Utility) could allow an attacker with special access to gain more access than they should have. This could lead to data corruption or system crashes. Oracle has released a patch to fix the issue, and you should update your system as soon as possible.

Original advisory text
An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area resulting in loss of integrity or availability.
An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area resulting in loss of integrity or availability.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.9 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-190Integer Overflow
Timeline
Published6 Sep 2025
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2023-31365 · NVD
Track software like this
Free during beta