cve 2023 28938

CVE-2023-28938 is a security vulnerability affecting certain Intel SSD Tools distributions that ship an upstream mdadm build older than version 4.2-rc2. The issue involves uncontrolled resource consumption, where a privileged local user can cause a denial-of-service (DoS) by exhausting memory or other process resources. Intel's security advisory and vulnerability databases recommend upgrading to mdadm-4.2-rc2 or later to mitigate the risk. This tag covers discussions and guidance related to patching the vulnerability, including steps to update mdadm and prevent DoS attacks on systems using Intel SSD Tools.