CVE-2023-28736: Mdadm Project Mdadm

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Mdadm Project Mdadm: before 4.2 (fixed in 4.2); version 4.2 only

Published 2023-08-11. Last modified 2026-06-17.