Vulnerability-Lookup

CVE-2023-30772 (GCVE-0-2023-30772)

Vulnerability from cvelistv5 – Published: 2023-04-16 00:00 – Updated: 2025-05-05 15:58

Summary

The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.

Severity

6.4 (Medium)


                        
                          CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:28 UTC

CWE

n/a
CWE-416 - Use After Free

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2318 records in the last 180 days details

References

4 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v6.x/Chan…
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://bugzilla.suse.com/show_bug.cgi?id=1210329
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T14:37:15.383Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
          },
          {
            "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-30772",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:28:35.853742Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T15:58:09.901Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
        },
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
        },
        {
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
        },
        {
          "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-30772",
    "datePublished": "2023-04-16T00:00:00.000Z",
    "dateReserved": "2023-04-16T00:00:00.000Z",
    "dateUpdated": "2025-05-05T15:58:09.901Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-30772",
      "date": "2026-10-10",
      "epss": "0.00474",
      "percentile": "0.39118"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9DB8D56A-80A7-46E9-A9BD-100B7446E81A",
                  "versionEndExcluding": "6.2.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device."
        }
      ],
      "id": "CVE-2023-30772",
      "lastModified": "2024-11-21T08:00:52.580",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "HIGH",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 0.5,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2023-04-16T04:15:08.573",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Issue Tracking",
            "Third Party Advisory"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Mailing List",
            "Patch"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Mailing List",
            "Patch"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Issue Tracking",
            "Third Party Advisory"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Patch"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Patch"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-416"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "microsoft_vex": {
      "current_release_date": "2023-05-03T00:00:00.000Z",
      "cve": "CVE-2023-30772",
      "id": "msrc_CVE-2023-30772",
      "initial_release_date": "2023-04-01T00:00:00.000Z",
      "product_status:fixed": "3",
      "product_status:known_affected": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.",
      "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-30772.json",
      "version": "3"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "cve@mitre.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9DB8D56A-80A7-46E9-A9BD-100B7446E81A",
                    "versionEndExcluding": "6.2.9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device."
          }
        ],
        "id": "CVE-2023-30772",
        "lastModified": "2026-06-17T05:55:38.993",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "PHYSICAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 0.5,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "PHYSICAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 0.5,
              "impactScore": 5.9,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2023-30772",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:28:35.853742Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2023-04-16T04:15:08.573",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Issue Tracking",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Patch"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Patch"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-02-18T17:15:02+00:00",
      "cve": "CVE-2023-30772",
      "id": "CVE-2023-30772",
      "initial_release_date": "2023-03-12T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: da9150: race condition leading to use-after-free in da9150_charger_remove()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-30772.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-10-01T01:52:17Z",
      "cve": "CVE-2023-30772",
      "id": "CVE-2023-30772",
      "initial_release_date": "2023-04-17T01:44:52Z",
      "product_status:known_affected": "292",
      "product_status:known_not_affected": "6",
      "product_status:recommended": "1223",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-30772",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-30772.json",
      "version": "62"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T14:37:15.383Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
              },
              {
                "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
                "tags": [
                  "mailing-list",
                  "x_transferred"
                ],
                "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "PHYSICAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.4,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-30772",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-04-23T13:28:35.853742Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-416",
                    "description": "CWE-416 Use After Free",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-05-05T13:05:56.229Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-05-03T00:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9"
            },
            {
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37"
            },
            {
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210329"
            },
            {
              "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
              "tags": [
                "mailing-list"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2023-30772",
        "datePublished": "2023-04-16T00:00:00.000Z",
        "dateReserved": "2023-04-16T00:00:00.000Z",
        "dateUpdated": "2025-05-05T15:58:09.901Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

OESA-2023-1267 (CVE-2023-1990)

Vulnerability from osv_openeuler – Published: 2023-04-28 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.(CVE-2023-1990)

The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.(CVE-2023-30772)

The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The same behavior can be observed on a bare-metal machine when forcing the mitigation to IBRS on boot command line.This happened because when plain IBRS was enabled (not enhanced IBRS), the kernel had some logic that determined that STIBP was not needed. The IBRS bit implicitly protects against cross-thread branch target injection. However, with legacy IBRS, the IBRS bit was cleared on returning to userspace, due to performance reasons, which disabled the implicit STIBP and left userspace threads vulnerable to cross-thread branch target injection against which STIBP protects.(CVE-2023-1998)

Severity

6.4 (Medium)


                    
                      CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-1990	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-30772	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-1998	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-tools-debuginfo-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "bpftool-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "perf-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2304.5.0.0199.oe1.aarch64.rpm",
          "kernel-4.19.90-2304.5.0.0199.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2304.5.0.0199.oe1.src.rpm"
        ],
        "x86_64": [
          "python2-perf-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "perf-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "bpftool-4.19.90-2304.5.0.0199.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2304.5.0.0199.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2304.5.0.0199.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Medium"
  },
  "details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nA use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.(CVE-2023-1990)\r\n\r\nThe Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.(CVE-2023-30772)\n\nThe Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The same behavior can be observed on a bare-metal machine when forcing the mitigation to IBRS on boot command line.This happened because when plain IBRS was enabled (not enhanced IBRS), the kernel had some logic that determined that STIBP was not needed. The IBRS bit implicitly protects against cross-thread branch target injection. However, with legacy IBRS, the IBRS bit was cleared on returning to userspace, due to performance reasons, which disabled the implicit STIBP and left userspace threads vulnerable to cross-thread branch target injection against which STIBP protects.(CVE-2023-1998)",
  "id": "OESA-2023-1267",
  "modified": "2026-08-06T11:05:44Z",
  "published": "2023-04-28T11:05:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1267"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1990"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30772"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1998"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2023-1990",
    "CVE-2023-30772",
    "CVE-2023-1998"
  ]
}

OESA-2023-1268 (CVE-2023-1855)

Vulnerability from osv_openeuler – Published: 2023-04-28 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.(CVE-2023-1855)

A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.(CVE-2023-1990)

A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.

The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.

We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.

(CVE-2023-1872)

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.(CVE-2023-2006)

The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.(CVE-2023-30772)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-1855	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-1990	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-1872	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-2006	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-30772	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-tools-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-source-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "python3-perf-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-debuginfo-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-devel-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-debugsource-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "bpftool-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "perf-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "bpftool-debuginfo-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-tools-devel-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "python3-perf-debuginfo-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "kernel-headers-5.10.0-60.92.0.116.oe2203.aarch64.rpm",
          "perf-debuginfo-5.10.0-60.92.0.116.oe2203.aarch64.rpm"
        ],
        "src": [
          "kernel-5.10.0-60.92.0.116.oe2203.src.rpm"
        ],
        "x86_64": [
          "kernel-debuginfo-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "python3-perf-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "perf-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "perf-debuginfo-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-devel-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-source-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-headers-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-tools-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "bpftool-debuginfo-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "python3-perf-debuginfo-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-tools-devel-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "bpftool-5.10.0-60.92.0.116.oe2203.x86_64.rpm",
          "kernel-debugsource-5.10.0-60.92.0.116.oe2203.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.10.0-60.92.0.116.oe2203"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nA use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.(CVE-2023-1855)\r\n\r\nA use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.(CVE-2023-1990)\r\n\r\nA use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.\r\n\r\nThe io_file_get_fixed function lacks the presence of ctx-\u0026gt;uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.\r\n\r\nWe recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.\r\n\r\n(CVE-2023-1872)\r\n\r\nA race condition was found in the Linux kernel\u0026apos;s RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.(CVE-2023-2006)\r\n\r\nThe Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.(CVE-2023-30772)",
  "id": "OESA-2023-1268",
  "modified": "2026-08-06T11:05:44Z",
  "published": "2023-04-28T11:05:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1268"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1855"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1990"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1872"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2006"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30772"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2023-1855",
    "CVE-2023-1990",
    "CVE-2023-1872",
    "CVE-2023-2006",
    "CVE-2023-30772"
  ]
}

SSA-806742

Vulnerability from csaf_siemens - Published: 2024-02-13 00:00 - Updated: 2024-02-13 00:00

Summary

SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4

Scope

160 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Known affected: 11 products

https://support.industry.siemens.com/cs/ww/en/view/109826613/

Open the full advisory

SUSE-SU-2023:2140-1

Vulnerability from csaf_suse - Published: 2023-05-09 12:28 - Updated: 2023-05-09 12:28

Summary

Security update for the Linux Kernel

Severity

Important

Scope

13 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Recommended: 192 products

Open the full advisory

SUSE-SU-2023:2141-1

Vulnerability from csaf_suse - Published: 2023-05-09 12:29 - Updated: 2023-05-09 12:29

Summary

Security update for the Linux Kernel

Severity

Important

Scope

13 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Recommended: 34 products

Open the full advisory

SUSE-SU-2023:2146-1

Vulnerability from csaf_suse - Published: 2023-05-09 15:03 - Updated: 2026-10-04 11:03

Summary

Security update for the Linux Kernel

Severity

Important

Scope

15 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Recommended: 177 products

Open the full advisory

SUSE-SU-2023:2147-1

Vulnerability from csaf_suse - Published: 2023-05-09 15:04 - Updated: 2026-10-04 11:03

Summary

Security update for the Linux Kernel

Severity

Important

Scope

15 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Recommended: 22 products

Open the full advisory

SUSE-SU-2023:2148-1

Vulnerability from csaf_suse - Published: 2023-05-09 15:05 - Updated: 2026-10-04 11:03

Summary

Security update for the Linux Kernel

Severity

Important

Scope

16 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Recommended: 261 products

Open the full advisory

SUSE-SU-2023:2151-1

Vulnerability from csaf_suse - Published: 2023-05-09 15:35 - Updated: 2026-10-04 11:03

Summary

Security update for the Linux Kernel

Severity

Important

Scope

11 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Recommended: 158 products

Open the full advisory

SUSE-SU-2023:2156-1

Vulnerability from csaf_suse - Published: 2023-05-10 11:17 - Updated: 2026-10-04 11:03

Summary

Security update for the Linux Kernel

Severity

Important

Scope

8 vulnerabilities in this advisory, including CVE-2023-30772.

CVE-2023-30772

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Recommended: 12 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-30772 (GCVE-0-2023-30772)

OESA-2023-1267 (CVE-2023-1990)

OESA-2023-1268 (CVE-2023-1855)

Tags

Sightings

Nomenclature

Related by attack behaviour