wid-sec-w-2023-3181
Vulnerability from csaf_certbund
Published
2023-12-19 23:00
Modified
2024-06-09 22:00
Summary
Linux Kernel: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Angriff
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service zu verursachen, Code auszuführen oder um seine Privilegien zu erhöhen.
Betroffene Betriebssysteme
- Linux
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service zu verursachen, Code auszuf\u00fchren oder um seine Privilegien zu erh\u00f6hen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-3181 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3181.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-3181 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3181"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6605-1 vom 2024-01-25",
"url": "https://ubuntu.com/security/notices/USN-6605-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6609-1 vom 2024-01-26",
"url": "https://ubuntu.com/security/notices/USN-6609-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6604-1 vom 2024-01-26",
"url": "https://www.cybersecurity-help.cz/vdb/SB2024012601"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6603-1 vom 2024-01-26",
"url": "https://www.cybersecurity-help.cz/vdb/SB2024012602"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6602-1 vom 2024-01-26",
"url": "https://www.cybersecurity-help.cz/vdb/SB2024012603"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6601-1 vom 2024-01-26",
"url": "https://www.cybersecurity-help.cz/vdb/SB2024012604"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6608-1 vom 2024-01-26",
"url": "https://ubuntu.com/security/notices/USN-6608-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6607-1 vom 2024-01-26",
"url": "https://ubuntu.com/security/notices/USN-6607-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6606-1 vom 2024-01-25",
"url": "https://ubuntu.com/security/notices/USN-6606-1"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-1899 vom 2024-01-09",
"url": "https://alas.aws.amazon.com/ALAS-2024-1899.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2024-167 vom 2024-03-06",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2024-167.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2391 vom 2024-01-10",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2391.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.15-2024-033 vom 2024-01-09",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.15-2024-033.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.10-2024-045 vom 2024-01-09",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2024-045.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.4-2024-057 vom 2024-01-09",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2024-057.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6605-2 vom 2024-01-29",
"url": "https://ubuntu.com/security/notices/USN-6605-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6604-2 vom 2024-01-30",
"url": "https://www.cybersecurity-help.cz/vdb/SB2024013002"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6635-1 vom 2024-02-14",
"url": "https://ubuntu.com/security/notices/USN-6635-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6608-2 vom 2024-02-14",
"url": "https://ubuntu.com/security/notices/USN-6608-2"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1250 vom 2024-03-12",
"url": "https://access.redhat.com/errata/RHSA-2024:1250"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6628-2 vom 2024-02-15",
"url": "https://ubuntu.com/security/notices/USN-6628-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6639-1 vom 2024-02-15",
"url": "https://ubuntu.com/security/notices/USN-6639-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6609-2 vom 2024-01-30",
"url": "https://ubuntu.com/security/notices/USN-6609-2"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3710 vom 2024-01-11",
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3711 vom 2024-01-11",
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1018 vom 2024-02-28",
"url": "https://access.redhat.com/errata/RHSA-2024:1018"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1019 vom 2024-02-28",
"url": "https://access.redhat.com/errata/RHSA-2024:1019"
},
{
"category": "external",
"summary": "RedHat Bugzilla vom 2023-12-19",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255283"
},
{
"category": "external",
"summary": "RedHat Bugzilla vom 2023-12-19",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255286"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0115-1 vom 2024-01-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017661.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0117-1 vom 2024-01-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017660.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0129-1 vom 2024-01-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017658.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0120-1 vom 2024-01-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017659.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0118-1 vom 2024-01-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017668.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0113-1 vom 2024-01-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017671.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0112-1 vom 2024-01-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017672.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0110-1 vom 2024-01-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017674.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0339-1 vom 2024-02-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017862.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0347-1 vom 2024-02-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017868.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0331-1 vom 2024-02-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017863.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-1912 vom 2024-02-06",
"url": "https://alas.aws.amazon.com/ALAS-2024-1912.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0348-1 vom 2024-02-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017867.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2443 vom 2024-02-06",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2443.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0344-1 vom 2024-02-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017861.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0930 vom 2024-02-21",
"url": "https://access.redhat.com/errata/RHSA-2024:0930"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2024-162 vom 2024-02-06",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2024-162.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2024-163 vom 2024-02-06",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2024-163.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2024-161 vom 2024-02-06",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2024-161.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0153-1 vom 2024-01-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017684.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0141-1 vom 2024-01-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017677.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0154-1 vom 2024-01-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017683.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0160-1 vom 2024-01-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017686.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0156-1 vom 2024-01-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017689.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0393-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017879.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0389-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017880.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0380-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017881.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1306 vom 2024-03-13",
"url": "https://access.redhat.com/errata/RHSA-2024:1306"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0358-1 vom 2024-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017871.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6609-3 vom 2024-02-06",
"url": "https://ubuntu.com/security/notices/USN-6609-3"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0351-1 vom 2024-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017869.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0362-1 vom 2024-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017870.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0352-1 vom 2024-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017872.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0378-1 vom 2024-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017873.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0373-1 vom 2024-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017874.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0376-1 vom 2024-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017876.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0395-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017877.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0421-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017887.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0725 vom 2024-02-07",
"url": "https://access.redhat.com/errata/RHSA-2024:0725"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0724 vom 2024-02-07",
"url": "https://access.redhat.com/errata/RHSA-2024:0724"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0723 vom 2024-02-08",
"url": "https://access.redhat.com/errata/RHSA-2024:0723"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0409-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017883.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0418-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017884.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0414-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017885.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice LSN-0100-1 vom 2024-02-07",
"url": "https://ubuntu.com/security/notices/LSN-0100-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0411-1 vom 2024-02-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017886.html"
},
{
"category": "external",
"summary": "IGEL Security Notice ISN-2024-06 vom 2024-03-12",
"url": "https://kb.igel.com/securitysafety/en/isn-2024-06-os-11-kernel-vulnerabilities-117259724.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5593 vom 2024-01-01",
"url": "https://lists.debian.org/debian-security-announce/2024/msg00000.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0428-1 vom 2024-02-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017890.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0429-1 vom 2024-02-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017889.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.15-2024-035 vom 2024-01-23",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.15-2024-035.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.10-2024-047 vom 2024-01-23",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2024-047.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5594 vom 2024-01-02",
"url": "https://lists.debian.org/debian-security-announce/2024/msg00001.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6628-1 vom 2024-02-09",
"url": "https://ubuntu.com/security/notices/USN-6628-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1404 vom 2024-03-19",
"url": "https://access.redhat.com/errata/RHSA-2024:1404"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1607 vom 2024-04-02",
"url": "https://access.redhat.com/errata/RHSA-2024:1607"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1614 vom 2024-04-02",
"url": "https://access.redhat.com/errata/RHSA-2024:1614"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2024:1607 vom 2024-04-05",
"url": "https://errata.build.resf.org/RLSA-2024:1607"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2024:1614 vom 2024-04-05",
"url": "https://errata.build.resf.org/RLSA-2024:1614"
},
{
"category": "external",
"summary": "Siemens Security Advisory SSA-265688 vom 2024-04-09",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-1607 vom 2024-04-11",
"url": "https://linux.oracle.com/errata/ELSA-2024-1607.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1840 vom 2024-04-16",
"url": "https://access.redhat.com/errata/RHSA-2024:1840"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1836 vom 2024-04-16",
"url": "https://access.redhat.com/errata/RHSA-2024:1836"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2394 vom 2024-04-30",
"url": "https://access.redhat.com/errata/RHSA-2024:2394"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2093 vom 2024-05-01",
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RXSA-2024:1607 vom 2024-05-06",
"url": "https://errata.build.resf.org/RXSA-2024:1607"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-198 vom 2024-05-08",
"url": "https://www.dell.com/support/kbdoc/000224827/dsa-2024-="
},
{
"category": "external",
"summary": "IBM Security Bulletin 7152469 vom 2024-05-15",
"url": "https://www.ibm.com/support/pages/node/7152469"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1680-1 vom 2024-05-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018547.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1696-1 vom 2024-05-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018554.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1677-1 vom 2024-05-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018543.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1686-1 vom 2024-05-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018552.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1695-1 vom 2024-05-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018549.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1709-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018561.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1706-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018564.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1729-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018576.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1726-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018577.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1712-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018570.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1739-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018580.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1735-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018582.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1736-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018583.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1720-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018567.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1732-1 vom 2024-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018573.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3138 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:3138"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2950 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:2950"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1757-1 vom 2024-05-22",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018593.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1742-1 vom 2024-05-22",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018590.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1748-1 vom 2024-05-22",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018589.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1751-1 vom 2024-05-22",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018585.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7156774 vom 2024-06-07",
"url": "https://www.ibm.com/support/pages/node/7156774"
}
],
"source_lang": "en-US",
"title": "Linux Kernel: Mehrere Schwachstellen erm\u00f6glichen Privilegieneskalation",
"tracking": {
"current_release_date": "2024-06-09T22:00:00.000+00:00",
"generator": {
"date": "2024-06-10T08:07:48.276+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-3181",
"initial_release_date": "2023-12-19T23:00:00.000+00:00",
"revision_history": [
{
"date": "2023-12-19T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-01-01T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2024-01-02T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2024-01-08T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-01-09T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-01-11T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2024-01-16T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-01-17T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-01-18T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-01-22T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-01-25T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-01-29T23:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-01-30T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-02-05T23:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE und Amazon aufgenommen"
},
{
"date": "2024-02-06T23:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE und Ubuntu aufgenommen"
},
{
"date": "2024-02-07T23:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von SUSE, Red Hat und Ubuntu aufgenommen"
},
{
"date": "2024-02-08T23:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-02-13T23:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-02-14T23:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-02-20T23:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-02-28T23:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-03-05T23:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-03-11T23:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-03-12T23:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von IGEL aufgenommen"
},
{
"date": "2024-03-13T23:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-03-19T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-04-02T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-04-07T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2024-04-08T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Siemens aufgenommen"
},
{
"date": "2024-04-11T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-04-16T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-04-29T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-01T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-06T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2024-05-07T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-05-15T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2024-05-20T22:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-05-21T22:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-05-22T22:00:00.000+00:00",
"number": "39",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-06-09T22:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "40"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "virtual",
"product": {
"name": "Dell NetWorker virtual",
"product_id": "T034583",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:virtual"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "EMC Avamar",
"product": {
"name": "EMC Avamar",
"product_id": "T014381",
"product_identification_helper": {
"cpe": "cpe:/a:emc:avamar:-"
}
}
}
],
"category": "vendor",
"name": "EMC"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM QRadar SIEM",
"product": {
"name": "IBM QRadar SIEM",
"product_id": "T021415",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "12",
"product": {
"name": "IBM Security Guardium 12.0",
"product_id": "T031092",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_guardium:12.0"
}
}
}
],
"category": "product_name",
"name": "Security Guardium"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c11.10.100",
"product": {
"name": "IGEL OS \u003c11.10.100",
"product_id": "T033380",
"product_identification_helper": {
"cpe": "cpe:/o:igel:os:11.10.100"
}
}
}
],
"category": "product_name",
"name": "OS"
}
],
"category": "vendor",
"name": "IGEL"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Linux Kernel",
"product": {
"name": "Open Source Linux Kernel",
"product_id": "T029076",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "1500",
"product": {
"name": "Siemens SIMATIC S7 1500",
"product_id": "T019436",
"product_identification_helper": {
"cpe": "cpe:/h:siemens:simatic_s7:1500"
}
}
}
],
"category": "product_name",
"name": "SIMATIC S7"
}
],
"category": "vendor",
"name": "Siemens"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-6931",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle im Linux Kernel. In der Systemkomponente \"Performance Events\" kann ein Zustand ausgel\u00f6st werden, der es erm\u00f6glicht, Daten \u00fcber das Ende oder vor den Anfang des vorgesehenen Speicherpuffers hinaus zu schreiben. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service zu verursachen, Code auszuf\u00fchren oder seine Rechte zu erweitern."
}
],
"product_status": {
"known_affected": [
"T029076",
"67646",
"T034583",
"T004914",
"T032255",
"T019436",
"T014381",
"2951",
"T002207",
"T033380",
"T000126",
"T021415",
"T031092",
"398363"
]
},
"release_date": "2023-12-19T23:00:00Z",
"title": "CVE-2023-6931"
},
{
"cve": "CVE-2023-6932",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle im Linux Kernel. Bei der Nutzung des IGMP-Protokolls kommt es unter bestimmten Bedingungen zu einer Race Condition. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service zu verursachen, Code auszuf\u00fchren oder seine Rechte zu erweitern."
}
],
"product_status": {
"known_affected": [
"T029076",
"67646",
"T034583",
"T004914",
"T032255",
"T019436",
"T014381",
"2951",
"T002207",
"T033380",
"T000126",
"T021415",
"T031092",
"398363"
]
},
"release_date": "2023-12-19T23:00:00Z",
"title": "CVE-2023-6932"
}
]
}
Loading...