{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.8 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.8 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.8 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-46813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46813"
    },
    {
      "name": "CVE-2023-1838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1838"
    },
    {
      "name": "CVE-2023-28328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28328"
    },
    {
      "name": "CVE-2023-5178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5178"
    },
    {
      "name": "CVE-2023-23455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23455"
    },
    {
      "name": "CVE-2023-2163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2163"
    },
    {
      "name": "CVE-2023-1855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1855"
    },
    {
      "name": "CVE-2023-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3611"
    },
    {
      "name": "CVE-2023-31436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31436"
    },
    {
      "name": "CVE-2023-33203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33203"
    },
    {
      "name": "CVE-2023-3812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3812"
    },
    {
      "name": "CVE-2023-2162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2162"
    },
    {
      "name": "CVE-2023-1079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1079"
    },
    {
      "name": "CVE-2023-3772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3772"
    },
    {
      "name": "CVE-2023-3567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3567"
    },
    {
      "name": "CVE-2023-35824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35824"
    },
    {
      "name": "CVE-2023-45871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45871"
    },
    {
      "name": "CVE-2023-1075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1075"
    },
    {
      "name": "CVE-2023-35823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35823"
    },
    {
      "name": "CVE-2023-26545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-26545"
    },
    {
      "name": "CVE-2023-4622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4622"
    },
    {
      "name": "CVE-2023-35825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35825"
    },
    {
      "name": "CVE-2023-3141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3141"
    },
    {
      "name": "CVE-2023-0458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0458"
    },
    {
      "name": "CVE-2023-1073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1073"
    },
    {
      "name": "CVE-2023-4132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4132"
    },
    {
      "name": "CVE-2023-4623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4623"
    },
    {
      "name": "CVE-2023-5717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5717"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0092",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-02-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux de RedHat\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\nd\u00e9ni de service et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de RedHat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:0575 du 30 janvier 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:0575"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat CodeReady Linux Builder pour ARM 64 - Extended Update Support 9.2 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Power, little endian 7 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time pour x86_64 - 4 years of updates 9.0 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server pour Power LE - Update Services pour SAP Solutions 9.2 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - TUS 8.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time - Telecommunications Update Service 8.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour ARM 64 - Extended Update Support 9.0 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time pour NFV 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour x86_64 - Update Services pour SAP Solutions 9.0 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour ARM 64 - Extended Update Support 9.2 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server pour Power LE - Update Services pour SAP Solutions 8.2 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Power, little endian - Extended Update Support 9.2 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour IBM z Systems - Extended Update Support 9.2 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour x86_64 - Extended Update Support 9.0 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder pour IBM z Systems - Extended Update Support 9.2 s390x",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server pour Power LE - Update Services pour SAP Solutions 9.0 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder pour x86_64 - Extended Update Support 9.2 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server pour IBM z Systems - 4 years of updates 9.2 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Workstation 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder pour IBM z Systems - Extended Update Support 9.0 s390x",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour x86_64 - Update Services pour SAP Solutions 8.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour IBM z Systems - Extended Update Support 9.0 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour x86_64 - Extended Update Support 9.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 9.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder pour x86_64 - Extended Update Support 9.0 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour IBM z Systems 7 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time pour NFV pour x86_64 - 4 years of updates 9.0 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time pour NFV - Telecommunications Update Service 8.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Power, little endian - Extended Update Support 9.0 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server pour ARM 64 - 4 years of updates 9.2 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Scientific Computing 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Power, big endian 7 ppc64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Desktop 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time pour NFV pour x86_64 - 4 years of updates 9.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder pour Power, little endian - Extended Update Support 9.2 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server pour ARM 64 - 4 years of updates 9.0 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour x86_64 - Update Services pour SAP Solutions 9.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder pour Power, little endian - Extended Update Support 9.0 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder pour ARM 64 - Extended Update Support 9.0 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server pour IBM z Systems - 4 years of updates 9.0 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux pour Real Time pour x86_64 - 4 years of updates 9.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-3390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3390"
    },
    {
      "name": "CVE-2023-5178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5178"
    },
    {
      "name": "CVE-2022-0480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-0480"
    },
    {
      "name": "CVE-2024-0646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0646"
    },
    {
      "name": "CVE-2023-40283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40283"
    },
    {
      "name": "CVE-2023-2163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2163"
    },
    {
      "name": "CVE-2023-6817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6817"
    },
    {
      "name": "CVE-2022-41858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41858"
    },
    {
      "name": "CVE-2023-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3611"
    },
    {
      "name": "CVE-2023-31436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31436"
    },
    {
      "name": "CVE-2023-4921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4921"
    },
    {
      "name": "CVE-2022-42896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42896"
    },
    {
      "name": "CVE-2023-38409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38409"
    },
    {
      "name": "CVE-2022-3545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3545"
    },
    {
      "name": "CVE-2023-2176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2176"
    },
    {
      "name": "CVE-2023-4459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4459"
    },
    {
      "name": "CVE-2023-45871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45871"
    },
    {
      "name": "CVE-2022-40982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40982"
    },
    {
      "name": "CVE-2023-3609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3609"
    },
    {
      "name": "CVE-2022-38096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38096"
    },
    {
      "name": "CVE-2023-4622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4622"
    },
    {
      "name": "CVE-2024-26602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26602"
    },
    {
      "name": "CVE-2023-6932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6932"
    },
    {
      "name": "CVE-2023-35001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35001"
    },
    {
      "name": "CVE-2023-6546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6546"
    },
    {
      "name": "CVE-2023-7192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-7192"
    },
    {
      "name": "CVE-2024-1086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1086"
    },
    {
      "name": "CVE-2023-4623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4623"
    },
    {
      "name": "CVE-2023-3268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3268"
    },
    {
      "name": "CVE-2023-5717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5717"
    },
    {
      "name": "CVE-2023-2166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2166"
    },
    {
      "name": "CVE-2023-1192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1192"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0227",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-03-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux de RedHat\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de RedHat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1268 du 12 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1268"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1253 du 12 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1253"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1269 du 12 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1269"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1304 du 13 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1304"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1332 du 14 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1332"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1306 du 13 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1306"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1303 du 13 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1303"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1250 du 12 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1250"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:1249 du 12 mars 2024",
      "url": "https://access.redhat.com/errata/RHSA-2024:1249"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM Sterling Connect:Direct Web Services (Certified Container) toutes versions sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct Web Services versions 6.2.x ant\u00e9rieures \u00e0 6.2.0.23",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "AIX et VIOS sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct Web Services versions ant\u00e9rieures \u00e0 6.1.0.24",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "SOAR QRadar Plugin App versions ant\u00e9rieures \u00e0 5.4.0",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct Web Services versions 6.3.x ant\u00e9rieures \u00e0 6.3.0.7",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP8 IF02",
      "product": {
        "name": "QRadar SIEM",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-29483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-29483"
    },
    {
      "name": "CVE-2024-20919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20919"
    },
    {
      "name": "CVE-2023-21938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
    },
    {
      "name": "CVE-2023-1382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1382"
    },
    {
      "name": "CVE-2023-4732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4732"
    },
    {
      "name": "CVE-2022-48564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48564"
    },
    {
      "name": "CVE-2023-6681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6681"
    },
    {
      "name": "CVE-2023-3138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3138"
    },
    {
      "name": "CVE-2023-46813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46813"
    },
    {
      "name": "CVE-2023-46218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
    },
    {
      "name": "CVE-2023-1838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1838"
    },
    {
      "name": "CVE-2024-27273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27273"
    },
    {
      "name": "CVE-2023-28328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28328"
    },
    {
      "name": "CVE-2023-51043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51043"
    },
    {
      "name": "CVE-2023-5633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5633"
    },
    {
      "name": "CVE-2023-52425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52425"
    },
    {
      "name": "CVE-2022-38457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38457"
    },
    {
      "name": "CVE-2023-38546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
    },
    {
      "name": "CVE-2022-45688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45688"
    },
    {
      "name": "CVE-2022-26691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26691"
    },
    {
      "name": "CVE-2023-21939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
    },
    {
      "name": "CVE-2024-20926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
    },
    {
      "name": "CVE-2023-5178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5178"
    },
    {
      "name": "CVE-2023-50868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50868"
    },
    {
      "name": "CVE-2023-6536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6536"
    },
    {
      "name": "CVE-2023-23455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23455"
    },
    {
      "name": "CVE-2020-10001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10001"
    },
    {
      "name": "CVE-2024-0646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0646"
    },
    {
      "name": "CVE-2021-33503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33503"
    },
    {
      "name": "CVE-2023-40283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40283"
    },
    {
      "name": "CVE-2022-45884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45884"
    },
    {
      "name": "CVE-2023-50782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50782"
    },
    {
      "name": "CVE-2007-4559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4559"
    },
    {
      "name": "CVE-2023-33951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33951"
    },
    {
      "name": "CVE-2024-28102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28102"
    },
    {
      "name": "CVE-2023-2163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2163"
    },
    {
      "name": "CVE-2022-42895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42895"
    },
    {
      "name": "CVE-2024-22361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22361"
    },
    {
      "name": "CVE-2024-20921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
    },
    {
      "name": "CVE-2022-40133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40133"
    },
    {
      "name": "CVE-2023-4807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
    },
    {
      "name": "CVE-2023-28322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
    },
    {
      "name": "CVE-2023-45862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45862"
    },
    {
      "name": "CVE-2023-1989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1989"
    },
    {
      "name": "CVE-2020-3898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3898"
    },
    {
      "name": "CVE-2023-44487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
    },
    {
      "name": "CVE-2023-1855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1855"
    },
    {
      "name": "CVE-2018-20060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20060"
    },
    {
      "name": "CVE-2023-25193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25193"
    },
    {
      "name": "CVE-2022-45869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45869"
    },
    {
      "name": "CVE-2023-2513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2513"
    },
    {
      "name": "CVE-2023-22081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
    },
    {
      "name": "CVE-2023-20569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20569"
    },
    {
      "name": "CVE-2023-4206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4206"
    },
    {
      "name": "CVE-2023-6817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6817"
    },
    {
      "name": "CVE-2023-31084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31084"
    },
    {
      "name": "CVE-2023-5072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5072"
    },
    {
      "name": "CVE-2022-45919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45919"
    },
    {
      "name": "CVE-2019-13224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13224"
    },
    {
      "name": "CVE-2022-41858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41858"
    },
    {
      "name": "CVE-2023-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3611"
    },
    {
      "name": "CVE-2023-4128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4128"
    },
    {
      "name": "CVE-2023-31436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31436"
    },
    {
      "name": "CVE-2023-1074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1074"
    },
    {
      "name": "CVE-2019-19204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19204"
    },
    {
      "name": "CVE-2023-42753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42753"
    },
    {
      "name": "CVE-2023-4921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4921"
    },
    {
      "name": "CVE-2023-33203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33203"
    },
    {
      "name": "CVE-2023-3812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3812"
    },
    {
      "name": "CVE-2023-32360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32360"
    },
    {
      "name": "CVE-2023-27043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27043"
    },
    {
      "name": "CVE-2024-27269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27269"
    },
    {
      "name": "CVE-2021-43975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43975"
    },
    {
      "name": "CVE-2023-4207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4207"
    },
    {
      "name": "CVE-2018-19787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19787"
    },
    {
      "name": "CVE-2023-22067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
    },
    {
      "name": "CVE-2023-6356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6356"
    },
    {
      "name": "CVE-2024-1488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1488"
    },
    {
      "name": "CVE-2024-22195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22195"
    },
    {
      "name": "CVE-2023-1252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1252"
    },
    {
      "name": "CVE-2023-44794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-44794"
    },
    {
      "name": "CVE-2022-3545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3545"
    },
    {
      "name": "CVE-2023-2176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2176"
    },
    {
      "name": "CVE-2023-2162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2162"
    },
    {
      "name": "CVE-2023-1079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1079"
    },
    {
      "name": "CVE-2022-36402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36402"
    },
    {
      "name": "CVE-2023-33952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33952"
    },
    {
      "name": "CVE-2023-32324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32324"
    },
    {
      "name": "CVE-2023-36478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-36478"
    },
    {
      "name": "CVE-2014-3146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3146"
    },
    {
      "name": "CVE-2023-45803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45803"
    },
    {
      "name": "CVE-2023-3772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3772"
    },
    {
      "name": "CVE-2022-4744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4744"
    },
    {
      "name": "CVE-2023-3161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3161"
    },
    {
      "name": "CVE-2023-35824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35824"
    },
    {
      "name": "CVE-2023-45871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45871"
    },
    {
      "name": "CVE-2023-1998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1998"
    },
    {
      "name": "CVE-2023-28772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28772"
    },
    {
      "name": "CVE-2022-40982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40982"
    },
    {
      "name": "CVE-2019-16163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16163"
    },
    {
      "name": "CVE-2023-1786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1786"
    },
    {
      "name": "CVE-2023-1075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1075"
    },
    {
      "name": "CVE-2023-3609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3609"
    },
    {
      "name": "CVE-2023-38325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38325"
    },
    {
      "name": "CVE-2023-4155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4155"
    },
    {
      "name": "CVE-2023-4208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4208"
    },
    {
      "name": "CVE-2023-35823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35823"
    },
    {
      "name": "CVE-2019-9740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9740"
    },
    {
      "name": "CVE-2023-26545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-26545"
    },
    {
      "name": "CVE-2022-3640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3640"
    },
    {
      "name": "CVE-2022-45887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45887"
    },
    {
      "name": "CVE-2023-6535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6535"
    },
    {
      "name": "CVE-2024-26130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26130"
    },
    {
      "name": "CVE-2023-21937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
    },
    {
      "name": "CVE-2019-19203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19203"
    },
    {
      "name": "CVE-2023-1118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1118"
    },
    {
      "name": "CVE-2023-43804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-43804"
    },
    {
      "name": "CVE-2023-33850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33850"
    },
    {
      "name": "CVE-2023-2597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2597"
    },
    {
      "name": "CVE-2022-48560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48560"
    },
    {
      "name": "CVE-2022-3594",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3594"
    },
    {
      "name": "CVE-2023-34241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34241"
    },
    {
      "name": "CVE-2022-38096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38096"
    },
    {
      "name": "CVE-2023-4622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4622"
    },
    {
      "name": "CVE-2019-8696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8696"
    },
    {
      "name": "CVE-2020-26137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26137"
    },
    {
      "name": "CVE-2019-11324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11324"
    },
    {
      "name": "CVE-2023-3141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3141"
    },
    {
      "name": "CVE-2022-28388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28388"
    },
    {
      "name": "CVE-2023-30456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30456"
    },
    {
      "name": "CVE-2023-2004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2004"
    },
    {
      "name": "CVE-2023-5676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5676"
    },
    {
      "name": "CVE-2023-6606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6606"
    },
    {
      "name": "CVE-2019-11236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11236"
    },
    {
      "name": "CVE-2023-6932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6932"
    },
    {
      "name": "CVE-2023-0458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0458"
    },
    {
      "name": "CVE-2023-21968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
    },
    {
      "name": "CVE-2023-1073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1073"
    },
    {
      "name": "CVE-2023-3212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3212"
    },
    {
      "name": "CVE-2021-33631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33631"
    },
    {
      "name": "CVE-2023-50387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50387"
    },
    {
      "name": "CVE-2024-0985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0985"
    },
    {
      "name": "CVE-2024-20932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20932"
    },
    {
      "name": "CVE-2022-48624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
    },
    {
      "name": "CVE-2023-21930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
    },
    {
      "name": "CVE-2024-20918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
    },
    {
      "name": "CVE-2023-0597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0597"
    },
    {
      "name": "CVE-2023-6546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6546"
    },
    {
      "name": "CVE-2023-7192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-7192"
    },
    {
      "name": "CVE-2023-4132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4132"
    },
    {
      "name": "CVE-2024-1086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1086"
    },
    {
      "name": "CVE-2023-1206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1206"
    },
    {
      "name": "CVE-2024-0565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0565"
    },
    {
      "name": "CVE-2019-8675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8675"
    },
    {
      "name": "CVE-2023-4623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4623"
    },
    {
      "name": "CVE-2023-51042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51042"
    },
    {
      "name": "CVE-2023-0590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0590"
    },
    {
      "name": "CVE-2024-20945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
    },
    {
      "name": "CVE-2023-3268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3268"
    },
    {
      "name": "CVE-2023-21967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
    },
    {
      "name": "CVE-2023-5717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5717"
    },
    {
      "name": "CVE-2019-19012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19012"
    },
    {
      "name": "CVE-2020-27783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27783"
    },
    {
      "name": "CVE-2024-20952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
    },
    {
      "name": "CVE-2021-43818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43818"
    },
    {
      "name": "CVE-2021-43618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
    },
    {
      "name": "CVE-2023-2166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2166"
    },
    {
      "name": "CVE-2023-1192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1192"
    },
    {
      "name": "CVE-2023-6931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6931"
    },
    {
      "name": "CVE-2023-6610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6610"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0385",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-05-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits IBM\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0\ndistance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150297 du 06 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150297"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150684 du 09 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150684"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150803 du 09 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150803"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150277 du 05 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150277"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150196 du 03 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150196"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150798 du 09 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150798"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150804 du 09 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150804"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150799 du 09 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150799"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150276 du 05 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150276"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150802 du 09 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150802"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7150362 du 07 mai 2024",
      "url": "https://www.ibm.com/support/pages/node/7150362"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Secure Analytics versions ant\u00e9rieures \u00e0 7.5.0 UP8 IF03",
      "product": {
        "name": "Secure Analytics",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2023-1382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1382"
    },
    {
      "name": "CVE-2023-4732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4732"
    },
    {
      "name": "CVE-2022-48564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48564"
    },
    {
      "name": "CVE-2019-15505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15505"
    },
    {
      "name": "CVE-2023-52448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52448"
    },
    {
      "name": "CVE-2023-3138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3138"
    },
    {
      "name": "CVE-2023-46813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46813"
    },
    {
      "name": "CVE-2023-46218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
    },
    {
      "name": "CVE-2023-1838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1838"
    },
    {
      "name": "CVE-2023-40551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40551"
    },
    {
      "name": "CVE-2022-45934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45934"
    },
    {
      "name": "CVE-2023-28328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28328"
    },
    {
      "name": "CVE-2023-51043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51043"
    },
    {
      "name": "CVE-2023-51385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51385"
    },
    {
      "name": "CVE-2023-5633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5633"
    },
    {
      "name": "CVE-2023-52425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52425"
    },
    {
      "name": "CVE-2022-38457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38457"
    },
    {
      "name": "CVE-2023-38546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
    },
    {
      "name": "CVE-2023-45863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45863"
    },
    {
      "name": "CVE-2022-26691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26691"
    },
    {
      "name": "CVE-2023-6915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6915"
    },
    {
      "name": "CVE-2023-5178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5178"
    },
    {
      "name": "CVE-2024-26671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26671"
    },
    {
      "name": "CVE-2023-50868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50868"
    },
    {
      "name": "CVE-2023-6536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6536"
    },
    {
      "name": "CVE-2023-37453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-37453"
    },
    {
      "name": "CVE-2023-23455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23455"
    },
    {
      "name": "CVE-2022-45061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45061"
    },
    {
      "name": "CVE-2020-10001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10001"
    },
    {
      "name": "CVE-2024-0646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0646"
    },
    {
      "name": "CVE-2023-4091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4091"
    },
    {
      "name": "CVE-2023-40283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40283"
    },
    {
      "name": "CVE-2022-45884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45884"
    },
    {
      "name": "CVE-2023-52489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52489"
    },
    {
      "name": "CVE-2007-4559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4559"
    },
    {
      "name": "CVE-2023-33951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33951"
    },
    {
      "name": "CVE-2023-2163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2163"
    },
    {
      "name": "CVE-2023-4133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4133"
    },
    {
      "name": "CVE-2022-42895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42895"
    },
    {
      "name": "CVE-2023-4244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4244"
    },
    {
      "name": "CVE-2022-40133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40133"
    },
    {
      "name": "CVE-2021-35939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35939"
    },
    {
      "name": "CVE-2023-39193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39193"
    },
    {
      "name": "CVE-2023-28322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
    },
    {
      "name": "CVE-2024-22243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22243"
    },
    {
      "name": "CVE-2023-45862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45862"
    },
    {
      "name": "CVE-2023-1989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1989"
    },
    {
      "name": "CVE-2020-3898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3898"
    },
    {
      "name": "CVE-2023-51779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51779"
    },
    {
      "name": "CVE-2023-1855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1855"
    },
    {
      "name": "CVE-2024-28784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28784"
    },
    {
      "name": "CVE-2022-45869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45869"
    },
    {
      "name": "CVE-2023-2513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2513"
    },
    {
      "name": "CVE-2023-4408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4408"
    },
    {
      "name": "CVE-2023-42669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42669"
    },
    {
      "name": "CVE-2023-2828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2828"
    },
    {
      "name": "CVE-2023-22081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
    },
    {
      "name": "CVE-2023-20569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20569"
    },
    {
      "name": "CVE-2023-50961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50961"
    },
    {
      "name": "CVE-2023-4206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4206"
    },
    {
      "name": "CVE-2023-52340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52340"
    },
    {
      "name": "CVE-2023-6817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6817"
    },
    {
      "name": "CVE-2023-31084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31084"
    },
    {
      "name": "CVE-2024-26609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26609"
    },
    {
      "name": "CVE-2022-45919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45919"
    },
    {
      "name": "CVE-2019-13224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13224"
    },
    {
      "name": "CVE-2022-41858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41858"
    },
    {
      "name": "CVE-2023-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3611"
    },
    {
      "name": "CVE-2023-4128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4128"
    },
    {
      "name": "CVE-2023-34968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34968"
    },
    {
      "name": "CVE-2023-31436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31436"
    },
    {
      "name": "CVE-2001-1267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2001-1267"
    },
    {
      "name": "CVE-2023-1074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1074"
    },
    {
      "name": "CVE-2019-19204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19204"
    },
    {
      "name": "CVE-2023-42753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42753"
    },
    {
      "name": "CVE-2023-4921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4921"
    },
    {
      "name": "CVE-2024-22262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22262"
    },
    {
      "name": "CVE-2023-33203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33203"
    },
    {
      "name": "CVE-2023-5981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5981"
    },
    {
      "name": "CVE-2023-3812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3812"
    },
    {
      "name": "CVE-2023-32360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32360"
    },
    {
      "name": "CVE-2023-27043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27043"
    },
    {
      "name": "CVE-2023-39189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39189"
    },
    {
      "name": "CVE-2023-48795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
    },
    {
      "name": "CVE-2024-27269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27269"
    },
    {
      "name": "CVE-2023-38409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38409"
    },
    {
      "name": "CVE-2021-43975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43975"
    },
    {
      "name": "CVE-2023-4207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4207"
    },
    {
      "name": "CVE-2018-19787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19787"
    },
    {
      "name": "CVE-2023-28487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28487"
    },
    {
      "name": "CVE-2023-22067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
    },
    {
      "name": "CVE-2023-6135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6135"
    },
    {
      "name": "CVE-2023-6356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6356"
    },
    {
      "name": "CVE-2023-39198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39198"
    },
    {
      "name": "CVE-2024-1488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1488"
    },
    {
      "name": "CVE-2023-1252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1252"
    },
    {
      "name": "CVE-2021-3753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3753"
    },
    {
      "name": "CVE-2022-3545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3545"
    },
    {
      "name": "CVE-2020-28241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-28241"
    },
    {
      "name": "CVE-2023-2176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2176"
    },
    {
      "name": "CVE-2023-2162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2162"
    },
    {
      "name": "CVE-2023-1079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1079"
    },
    {
      "name": "CVE-2022-36402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36402"
    },
    {
      "name": "CVE-2023-33952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33952"
    },
    {
      "name": "CVE-2023-32324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32324"
    },
    {
      "name": "CVE-2014-3146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3146"
    },
    {
      "name": "CVE-2023-45803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45803"
    },
    {
      "name": "CVE-2023-3758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3758"
    },
    {
      "name": "CVE-2023-3772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3772"
    },
    {
      "name": "CVE-2023-34967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34967"
    },
    {
      "name": "CVE-2022-4744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4744"
    },
    {
      "name": "CVE-2023-40546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40546"
    },
    {
      "name": "CVE-2021-35937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35937"
    },
    {
      "name": "CVE-2023-3161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3161"
    },
    {
      "name": "CVE-2023-28464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28464"
    },
    {
      "name": "CVE-2023-3341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3341"
    },
    {
      "name": "CVE-2023-3567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3567"
    },
    {
      "name": "CVE-2021-41043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41043"
    },
    {
      "name": "CVE-2023-35824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35824"
    },
    {
      "name": "CVE-2023-45871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45871"
    },
    {
      "name": "CVE-2023-1998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1998"
    },
    {
      "name": "CVE-2023-28772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28772"
    },
    {
      "name": "CVE-2023-52580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52580"
    },
    {
      "name": "CVE-2022-40982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40982"
    },
    {
      "name": "CVE-2019-16163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16163"
    },
    {
      "name": "CVE-2023-1786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1786"
    },
    {
      "name": "CVE-2024-0553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0553"
    },
    {
      "name": "CVE-2023-1075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1075"
    },
    {
      "name": "CVE-2023-3609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3609"
    },
    {
      "name": "CVE-2023-4155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4155"
    },
    {
      "name": "CVE-2023-4208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4208"
    },
    {
      "name": "CVE-2023-35823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35823"
    },
    {
      "name": "CVE-2023-52574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52574"
    },
    {
      "name": "CVE-2022-3565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3565"
    },
    {
      "name": "CVE-2023-31083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31083"
    },
    {
      "name": "CVE-2023-26545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-26545"
    },
    {
      "name": "CVE-2022-3640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3640"
    },
    {
      "name": "CVE-2023-6176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6176"
    },
    {
      "name": "CVE-2022-45887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45887"
    },
    {
      "name": "CVE-2023-6535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6535"
    },
    {
      "name": "CVE-2023-25012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25012"
    },
    {
      "name": "CVE-2022-0500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-0500"
    },
    {
      "name": "CVE-2024-0841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0841"
    },
    {
      "name": "CVE-2019-19203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19203"
    },
    {
      "name": "CVE-2023-1118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1118"
    },
    {
      "name": "CVE-2023-43804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-43804"
    },
    {
      "name": "CVE-2020-25656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25656"
    },
    {
      "name": "CVE-2022-48560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48560"
    },
    {
      "name": "CVE-2017-7500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7500"
    },
    {
      "name": "CVE-2022-3594",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3594"
    },
    {
      "name": "CVE-2023-51780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51780"
    },
    {
      "name": "CVE-2023-52434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52434"
    },
    {
      "name": "CVE-2023-34241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34241"
    },
    {
      "name": "CVE-2022-3094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3094"
    },
    {
      "name": "CVE-2024-25742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25742"
    },
    {
      "name": "CVE-2024-25743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25743"
    },
    {
      "name": "CVE-2022-38096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38096"
    },
    {
      "name": "CVE-2023-4622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4622"
    },
    {
      "name": "CVE-2019-8696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8696"
    },
    {
      "name": "CVE-2024-26602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26602"
    },
    {
      "name": "CVE-2023-3141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3141"
    },
    {
      "name": "CVE-2021-4204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-4204"
    },
    {
      "name": "CVE-2022-28388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28388"
    },
    {
      "name": "CVE-2023-30456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30456"
    },
    {
      "name": "CVE-2023-42465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42465"
    },
    {
      "name": "CVE-2023-39192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39192"
    },
    {
      "name": "CVE-2023-5676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5676"
    },
    {
      "name": "CVE-2023-6606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6606"
    },
    {
      "name": "CVE-2023-39194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39194"
    },
    {
      "name": "CVE-2023-52620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52620"
    },
    {
      "name": "CVE-2023-24023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-24023"
    },
    {
      "name": "CVE-2023-6932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6932"
    },
    {
      "name": "CVE-2023-0458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0458"
    },
    {
      "name": "CVE-2023-1073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1073"
    },
    {
      "name": "CVE-2023-3212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3212"
    },
    {
      "name": "CVE-2021-33631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33631"
    },
    {
      "name": "CVE-2023-50387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50387"
    },
    {
      "name": "CVE-2023-40549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40549"
    },
    {
      "name": "CVE-2023-1513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1513"
    },
    {
      "name": "CVE-2022-48624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
    },
    {
      "name": "CVE-2011-4969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4969"
    },
    {
      "name": "CVE-2021-35938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35938"
    },
    {
      "name": "CVE-2023-40548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40548"
    },
    {
      "name": "CVE-2023-0597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0597"
    },
    {
      "name": "CVE-2024-22259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22259"
    },
    {
      "name": "CVE-2022-46329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46329"
    },
    {
      "name": "CVE-2023-34966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34966"
    },
    {
      "name": "CVE-2023-26604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-26604"
    },
    {
      "name": "CVE-2023-6546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6546"
    },
    {
      "name": "CVE-2023-7192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-7192"
    },
    {
      "name": "CVE-2023-4132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4132"
    },
    {
      "name": "CVE-2022-26377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26377"
    },
    {
      "name": "CVE-2023-52581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52581"
    },
    {
      "name": "CVE-2023-40550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40550"
    },
    {
      "name": "CVE-2019-13631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13631"
    },
    {
      "name": "CVE-2024-1086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1086"
    },
    {
      "name": "CVE-2023-1206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1206"
    },
    {
      "name": "CVE-2024-0565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0565"
    },
    {
      "name": "CVE-2019-8675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8675"
    },
    {
      "name": "CVE-2023-4623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4623"
    },
    {
      "name": "CVE-2023-51042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51042"
    },
    {
      "name": "CVE-2023-42755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42755"
    },
    {
      "name": "CVE-2023-0590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0590"
    },
    {
      "name": "CVE-2023-39615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39615"
    },
    {
      "name": "CVE-2017-7501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7501"
    },
    {
      "name": "CVE-2023-28486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28486"
    },
    {
      "name": "CVE-2023-50960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50960"
    },
    {
      "name": "CVE-2015-9251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9251"
    },
    {
      "name": "CVE-2023-5388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5388"
    },
    {
      "name": "CVE-2023-3268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3268"
    },
    {
      "name": "CVE-2023-25775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25775"
    },
    {
      "name": "CVE-2012-6708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6708"
    },
    {
      "name": "CVE-2022-2127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-2127"
    },
    {
      "name": "CVE-2020-7656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7656"
    },
    {
      "name": "CVE-2023-5717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5717"
    },
    {
      "name": "CVE-2019-19012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19012"
    },
    {
      "name": "CVE-2020-27783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27783"
    },
    {
      "name": "CVE-2023-6622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6622"
    },
    {
      "name": "CVE-2021-43818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43818"
    },
    {
      "name": "CVE-2022-23222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23222"
    },
    {
      "name": "CVE-2023-6121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6121"
    },
    {
      "name": "CVE-2021-43618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
    },
    {
      "name": "CVE-2023-2166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2166"
    },
    {
      "name": "CVE-2023-1192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1192"
    },
    {
      "name": "CVE-2023-40547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40547"
    },
    {
      "name": "CVE-2023-6931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6931"
    },
    {
      "name": "CVE-2023-6610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6610"
    },
    {
      "name": "CVE-2023-42754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42754"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0506",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-06-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Juniper Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Juniper Secure Analytics",
  "vendor_advisories": [
    {
      "published_at": "2024-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82681",
      "url": "https://supportportal.juniper.net/s/article/On-Demand-JSA-Series-Multiple-vulnerabilities-resolved-in-Juniper-Secure-Analytics-in-7-5-0-UP8-IF03"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C1E37DC-B08A-4CB0-B689-FE26E2B39375",
              "versionEndExcluding": "5.4.242",
              "versionStartIncluding": "5.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3567B8E6-5C31-435F-95D1-6A2BB44CB9D1",
              "versionEndExcluding": "5.10.179",
              "versionStartIncluding": "5.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C603326-394E-408E-B5E1-011979F7BD9D",
              "versionEndExcluding": "5.15.109",
              "versionStartIncluding": "5.11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "23989D73-416D-4C1B-8D9D-2A43A43DA115",
              "versionEndExcluding": "6.1.26",
              "versionStartIncluding": "5.16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BFF8B56C-0201-4D6A-901E-C9C643C04FF6",
              "versionEndExcluding": "6.2.13",
              "versionStartIncluding": "6.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incorrect verifier pruning\u00a0in BPF in Linux Kernel\u00a0\u003e=5.4\u00a0leads to unsafe\ncode paths being incorrectly marked as safe, resulting in\u00a0arbitrary read/write in\nkernel memory, lateral privilege escalation, and container escape."
    },
    {
      "lang": "es",
      "value": "La poda incorrecta del verificador en BPF en el kernel de Linux \u0026gt;=5.4 conduce a que las rutas de c\u00f3digo inseguras se marquen incorrectamente como seguras, lo que resulta en lectura/escritura arbitraria en la memoria del kernel, escalada de privilegios lateral y escape de contenedor."
    }
  ],
  "id": "CVE-2023-2163",
  "lastModified": "2024-11-21T07:58:03.743",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.8,
        "source": "cve-coordination@google.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-09-20T06:15:10.233",
  "references": [
    {
      "source": "cve-coordination@google.com",
      "tags": [
        "Mailing List",
        "Patch"
      ],
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Patch"
      ],
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed"
    }
  ],
  "sourceIdentifier": "cve-coordination@google.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-682"
        }
      ],
      "source": "cve-coordination@google.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-682"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2023-2163",
    "id": "GSD-2023-2163"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-2163"
      ],
      "details": "Incorrect verifier pruning\u00a0in BPF in Linux Kernel\u00a0\u003e=5.4\u00a0leads to unsafe\ncode paths being incorrectly marked as safe, resulting in\u00a0arbitrary read/write in\nkernel memory, lateral privilege escalation, and container escape.\n",
      "id": "GSD-2023-2163",
      "modified": "2023-12-13T01:20:32.314612Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@google.com",
        "ID": "CVE-2023-2163",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Linux Kernel",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "unaffected",
                            "versions": [
                              {
                                "lessThan": "5.4",
                                "status": "unaffected",
                                "version": "-",
                                "versionType": "custom"
                              },
                              {
                                "lessThan": "71b547f561247897a0a14f3082730156c0533fed",
                                "status": "affected",
                                "version": "-",
                                "versionType": "git"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Linux"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Incorrect verifier pruning\u00a0in BPF in Linux Kernel\u00a0\u003e=5.4\u00a0leads to unsafe\ncode paths being incorrectly marked as safe, resulting in\u00a0arbitrary read/write in\nkernel memory, lateral privilege escalation, and container escape.\n"
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.1.0-dev"
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-682",
                "lang": "eng",
                "value": "CWE-682 Incorrect Calculation"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed",
            "refsource": "MISC",
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9C1E37DC-B08A-4CB0-B689-FE26E2B39375",
                    "versionEndExcluding": "5.4.242",
                    "versionStartIncluding": "5.3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3567B8E6-5C31-435F-95D1-6A2BB44CB9D1",
                    "versionEndExcluding": "5.10.179",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4C603326-394E-408E-B5E1-011979F7BD9D",
                    "versionEndExcluding": "5.15.109",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23989D73-416D-4C1B-8D9D-2A43A43DA115",
                    "versionEndExcluding": "6.1.26",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BFF8B56C-0201-4D6A-901E-C9C643C04FF6",
                    "versionEndExcluding": "6.2.13",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Incorrect verifier pruning\u00a0in BPF in Linux Kernel\u00a0\u003e=5.4\u00a0leads to unsafe\ncode paths being incorrectly marked as safe, resulting in\u00a0arbitrary read/write in\nkernel memory, lateral privilege escalation, and container escape.\n"
          },
          {
            "lang": "es",
            "value": "La poda incorrecta del verificador en BPF en el kernel de Linux \u0026gt;=5.4 conduce a que las rutas de c\u00f3digo inseguras se marquen incorrectamente como seguras, lo que resulta en lectura/escritura arbitraria en la memoria del kernel, escalada de privilegios lateral y escape de contenedor."
          }
        ],
        "id": "CVE-2023-2163",
        "lastModified": "2023-12-15T15:48:16.843",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.0,
              "impactScore": 6.0,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 10.0,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.8,
              "source": "cve-coordination@google.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2023-09-20T06:15:10.233",
        "references": [
          {
            "source": "cve-coordination@google.com",
            "tags": [
              "Mailing List",
              "Patch"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed"
          }
        ],
        "sourceIdentifier": "cve-coordination@google.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-682"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-682"
              }
            ],
            "source": "cve-coordination@google.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2023-2163 Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-2163.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation",
    "tracking": {
      "current_release_date": "2023-09-22T00:00:00.000Z",
      "generator": {
        "date": "2025-10-20T00:40:17.993Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2023-2163",
      "initial_release_date": "2023-09-01T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-09-22T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 kernel 5.15.133.1-1",
                "product": {
                  "name": "\u003ccbl2 kernel 5.15.133.1-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 kernel 5.15.133.1-1",
                "product": {
                  "name": "cbl2 kernel 5.15.133.1-1",
                  "product_id": "18310"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 kernel 5.15.133.1-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 kernel 5.15.133.1-1 as a component of CBL Mariner 2.0",
          "product_id": "18310-17086"
        },
        "product_reference": "18310",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-2163",
      "cwe": {
        "id": "CWE-682",
        "name": "Incorrect Calculation"
      },
      "notes": [
        {
          "category": "general",
          "text": "Google",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "18310-17086"
        ],
        "known_affected": [
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-2163 Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-2163.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-09-22T00:00:00.000Z",
          "details": "5.15.133.1-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "temporalScore": 8.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "17086-1"
          ]
        }
      ],
      "title": "Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kernel-rt is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163)\n\n* kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)\n\n* kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)\n\n* kernel: use-after-free due to race condition occurring in dvb_register_device() (CVE-2022-45884)\n\n* kernel: use-after-free due to race condition occurring in dvb_net.c (CVE-2022-45886)\n\n* kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c (CVE-2022-45919)\n\n* kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:7548",
        "url": "https://access.redhat.com/errata/RHSA-2023:7548"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2148510",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2148510"
      },
      {
        "category": "external",
        "summary": "2148517",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2148517"
      },
      {
        "category": "external",
        "summary": "2151956",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151956"
      },
      {
        "category": "external",
        "summary": "2154178",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2154178"
      },
      {
        "category": "external",
        "summary": "2224048",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224048"
      },
      {
        "category": "external",
        "summary": "2240249",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240249"
      },
      {
        "category": "external",
        "summary": "2241924",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241924"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7548.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel-rt security update",
    "tracking": {
      "current_release_date": "2026-05-04T21:05:17+00:00",
      "generator": {
        "date": "2026-05-04T21:05:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.9"
        }
      },
      "id": "RHSA-2023:7548",
      "initial_release_date": "2023-11-28T16:05:26+00:00",
      "revision_history": [
        {
          "date": "2023-11-28T16:05:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-11-28T16:05:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-04T21:05:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Real Time for NFV (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux Real Time for NFV (v. 8)",
                  "product_id": "NFV-8.9.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::nfv"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux for Real Time (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux for Real Time (v. 8)",
                  "product_id": "RT-8.9.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::realtime"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
                "product": {
                  "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
                  "product_id": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@4.18.0-513.9.1.rt7.311.el8_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-core@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-core@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-modules@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-modules-extra@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-kvm@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-modules@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-modules-extra@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@4.18.0-513.9.1.rt7.311.el8_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src"
        },
        "product_reference": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)",
          "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "NFV-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src"
        },
        "product_reference": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)",
          "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        },
        "product_reference": "kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
        "relates_to_product_reference": "RT-8.9.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-45884",
      "cwe": {
        "id": "CWE-366",
        "name": "Race Condition within a Thread"
      },
      "discovery_date": "2022-11-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2148510"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the DVB core device driver. It could occur in the dvb_register_device() function due to the file_operations structure (fops) being dynamically allocated and later kfreed. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: use-after-free due to race condition occurring in dvb_register_device()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker must either have credentials for a vulnerable system and physical access to its ports, or they must have the elevated privileges necessary to control USB via sysfs. For that reason, Red Hat assesses the impact of this vulnerability as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-45884"
        },
        {
          "category": "external",
          "summary": "RHBZ#2148510",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2148510"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-45884",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-45884"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-45884",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45884"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-media/20221117045925.14297-4-imv4bel@gmail.com/",
          "url": "https://lore.kernel.org/linux-media/20221117045925.14297-4-imv4bel@gmail.com/"
        }
      ],
      "release_date": "2022-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-28T16:05:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the `dvb-core` kernel module. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: use-after-free due to race condition occurring in dvb_register_device()"
    },
    {
      "cve": "CVE-2022-45886",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2022-11-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2148517"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the dvb_net component of the DVB core device driver. It could occur between the time the device is disconnected (.disconnect function)  and the time the device node is opened (dvb_device_open function). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: use-after-free due to race condition occurring in dvb_net.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Because this vulnerability requires an attacker to either have physical access to a system with DVB hardware or requires a remote authenticated user to have knowledge about DVB hardware attached to the system and when it is disconnected and reconnected, Red Hat assesses the impact of this vulnerability as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-45886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2148517",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2148517"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-45886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-45886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-45886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45886"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel@gmail.com/",
          "url": "https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel@gmail.com/"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel@gmail.com/",
          "url": "https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel@gmail.com/"
        }
      ],
      "release_date": "2022-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-28T16:05:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the `dvb-core` kernel module. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: use-after-free due to race condition occurring in dvb_net.c"
    },
    {
      "cve": "CVE-2022-45919",
      "cwe": {
        "id": "CWE-366",
        "name": "Race Condition within a Thread"
      },
      "discovery_date": "2022-12-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2151956"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the DVB CA EN50221 interface of the DVB core device driver. It could occur in the dvb_ca_en50221_release() function if there is a disconnect after an open, because of the lack of a wait_event. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Because this vulnerability requires an attacker to either have physical access to a system with DVB hardware or requires a remote authenticated user to have knowledge about DVB hardware attached to the system and when it is disconnected and reconnected, Red Hat assesses the impact of this vulnerability as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-45919"
        },
        {
          "category": "external",
          "summary": "RHBZ#2151956",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2151956"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-45919",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-45919"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-45919",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45919"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-media/20221121063308.GA33821@ubuntu/T/#u",
          "url": "https://lore.kernel.org/linux-media/20221121063308.GA33821@ubuntu/T/#u"
        }
      ],
      "release_date": "2022-11-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-28T16:05:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the `dvb-core` kernel module. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Pumpkin (@u1f383), working with DEVCORE Internship Program"
          ]
        }
      ],
      "cve": "CVE-2023-1192",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-12-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2154178"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: use-after-free in smb2_is_status_io_timeout()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Because analysis indicates that this issue will only cause momentary interruptions to connections, Red Hat rates the impact of this flaw as Low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-1192"
        },
        {
          "category": "external",
          "summary": "RHBZ#2154178",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2154178"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-1192",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-1192"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-1192",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1192"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686fCVE-2023-52",
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686fCVE-2023-52"
        }
      ],
      "release_date": "2022-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-28T16:05:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: use-after-free in smb2_is_status_io_timeout()"
    },
    {
      "cve": "CVE-2023-2163",
      "cwe": {
        "id": "CWE-682",
        "name": "Incorrect Calculation"
      },
      "discovery_date": "2023-09-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2240249"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An incorrect verifier pruning flaw was found in BPF in the Linux Kernel that may lead to unsafe code paths incorrectly marked as safe, resulting in arbitrary read/writes in kernel memory, lateral privilege escalation, and container escape.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Enterprise Linux 9.3 not affected, because the required patch applied before this CVE creation. For the Red Hat Enterprise Linux 9 before version 9.3 required fixes applied too.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-2163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2240249",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240249"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-2163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-2163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-2163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2163"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed",
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed"
        }
      ],
      "release_date": "2023-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-28T16:05:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "category": "workaround",
          "details": "The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. This would require a privileged user with CAP_SYS_ADMIN or root to be able to abuse this flaw reducing its attack space.\n\nFor Red Hat Enterprise Linux 8 to confirm the current state, inspect the sysctl with the command:\n\n# cat /proc/sys/kernel/unprivileged_bpf_disabled\n\nThe setting of 1 would mean that unprivileged users can not use eBPF, mitigating the flaw.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe"
    },
    {
      "cve": "CVE-2023-3812",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2023-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2224048"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds memory access flaw was found in the Linux kernel\u2019s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-3812"
        },
        {
          "category": "external",
          "summary": "RHBZ#2224048",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224048"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-3812",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-3812"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-3812",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3812"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0",
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0"
        }
      ],
      "release_date": "2022-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-28T16:05:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, prevent the tun module from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags"
    },
    {
      "cve": "CVE-2023-5178",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-10-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2241924"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: use after free in nvmet_tcp_free_crypto in NVMe",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is actual only for systems where NVME over TCP being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
          "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
          "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-5178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2241924",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241924"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-5178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-5178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-5178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5178"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/",
          "url": "https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/"
        }
      ],
      "release_date": "2023-10-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-28T16:05:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.src",
            "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64",
            "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.9.1.rt7.311.el8_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: use after free in nvmet_tcp_free_crypto in NVMe"
    }
  ]
}