Vulnerability-Lookup

RHSA-2023:5069

Vulnerability from csaf_redhat - Published: 2023-09-12 11:07 - Updated: 2026-08-07 02:40

Summary

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel (5.14.0). Security Fix(es): * kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390) * kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610) * kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776) * kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004) * kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147) * kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248) * kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001) * kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637) * hw: amd: Cross-Process Information Leak (CVE-2023-20593) * kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026) * [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463) * rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121) * RHEL AWS ARM Instability During Microshift e2e tests (BZ#2223310) * RHEL 9.x updates for SEV-SNP guest support (BZ#2224587) * Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623) * bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945) * libceph: harden msgr2.1 frame segment length checks (BZ#2227070) * Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768) * Important iavf bug fixes July 2023 (BZ#2228156) * [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158) * lvconvert --splitcache, --uncache operations getting hung (BZ#2228481) * perf: EMR core and uncore PMU support (BZ#2230175) * NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483) * NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488) * [Hyper-V][RHEL 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747) * Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850) * [RHEL 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status SRB_STATUS_INTERNAL_ERROR (0x30) (BZ#2231990) * RHEL-9: WARNING: bad unlock balance detected! (BZ#2232213) * NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302) * [Lenovo 9.1 bug] RHEL 9 will hang when "echo c > /proc/sysrq-trigger". (BZ#2232700) * [RHEL-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64 (/proc/[pid]/wchan broken) (BZ#2233928) Enhancement(s): * [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270) * [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960) * [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170) * [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-50661

A memory leak flaw was found in the Linux kernel's seccomp subsystem. When a process using seccomp filters is interrupted by a fatal signal during clone(), the seccomp_filter structure and associated BPF program memory are not properly freed. This occurs because copy_seccomp() is called before the fatal_signal_pending() check, leaving allocated resources unreleased on the error path.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-911 - Improper Update of Reference Count

Affected products

Fixed 201 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debug-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debug-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-doc-0:5.14.0-284.30.1.el9_2.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-devel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-devel-matched-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-abi-stablelists-0:5.14.0-284.30.1.el9_2.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-uki-virt-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-uki-virt-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-modules-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-modules-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-modules-extra-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2023-1637

A flaw was found in the Linux kernel X86 CPU Power management when resuming CPU from suspend-to-RAM. This issue could allow a local user unauthorized access to memory from the CPU.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 200 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debug-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debug-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-64k-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-devel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-devel-matched-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:rtla-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debug-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-64k-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-abi-stablelists-0:5.14.0-284.30.1.el9_2.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debug-uki-virt-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-uki-virt-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-modules-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-modules-core-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-modules-extra-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:bpftool-debuginfo-0:7.0.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-284.30.1.el9_2.x86_64	—	Vendor Fix fix

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:kernel-doc-0:5.14.0-284.30.1.el9_2.noarch		—

Threats

Impact Moderate

CVE-2023-3390

A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Important

CVE-2023-3610

A use-after-free vulnerability was found in the netfilter: nf_tables component in the Linux kernel due to a missing error handling in the abort path of NFT_MSG_NEWRULE. This flaw allows a local attacker with CAP_NET_ADMIN access capability to cause a local privilege escalation problem.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Important

CVE-2023-3776

A use-after-free vulnerability was found in fw_set_parms in net/sched/cls_fw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain local privilege escalation.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Important

CVE-2023-4004

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Important

CVE-2023-4147

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Important

CVE-2023-20593

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances.

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-1239 - Improper Zeroization of Hardware Register

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Moderate

CVE-2023-21102

A vulnerability was found in the __efi_rt_asm_wrapper of the efi-rt-wrapper.S in the Linux kernel, where there is a possible bypass of shadow stack protection due to a logic error in the code. This flaw could lead to local escalation of privilege without additional execution privileges needed.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-413 - Improper Resource Locking

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Moderate

CVE-2023-31248

A use-after-free flaw was found in the Linux kernel's Netfilter module in net/netfilter/nf_tables_api.c in nft_chain_lookup_byid. This flaw allows a local attacker to cause a local privilege escalation issue due to a missing cleanup.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Important

CVE-2023-35001

An out-of-bounds (OOB) memory access flaw was found in the Netfilter module in the Linux kernel's nft_byteorder_eval in net/netfilter/nft_byteorder.c. A bound check failure allows a local attacker with CAP_NET_ADMIN access to cause a local privilege escalation issue due to incorrect data alignment.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 200 products, the same list as for CVE-2023-1637

Known not affected 1 product, the same list as for CVE-2023-1637

Threats

Impact Important

CVE-2023-44466

An flaw was found in net/ceph/messenger_v2.c in the Linux Kernel. An integer signing error leads to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This issue occurs due to an untrusted length taken from a TCP packet in ceph_decode_32.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 201 products, the same list as for CVE-2022-50661

Threats

Impact Important

CVE-2023-53383

A flaw was found in the Linux kernel. On NVIDIA server platforms utilizing multiple interconnected T241 chips, a local user could trigger a vulnerability in the Generic Interrupt Controller (GIC) due to incorrect handling of inter-socket data packets. This can corrupt the GIC's internal state, leading to system instability, including kernel panics, and ultimately a Denial of Service (DoS).

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-821 - Incorrect Synchronization

Affected products

Fixed 201 products, the same list as for CVE-2022-50661

Threats

Impact Low

CVE-2023-53556

A flaw was found in the Linux kernel's iavf driver. A local user with administrative capabilities can exploit a use-after-free vulnerability, caused by a mismatch in network interface (NAPI) list management functions. This can lead to dangling NAPI entries, resulting in a kernel crash and a Denial of Service (DoS).

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-664 - Improper Control of a Resource Through its Lifetime

Affected products

Fixed 201 products, the same list as for CVE-2022-50661

Threats

Impact Moderate

CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy whole messages in or out as needed before doing any computation on them.

6.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

CWE-319 - Cleartext Transmission of Sensitive Information

Affected products

Fixed 201 products, the same list as for CVE-2022-50661

Threats

Impact Moderate

References

94 references

URL	Category
https://access.redhat.com/errata/RHSA-2023:5069	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2181891	external
https://bugzilla.redhat.com/show_bug.cgi?id=2213260	external
https://bugzilla.redhat.com/show_bug.cgi?id=2213455	external
https://bugzilla.redhat.com/show_bug.cgi?id=2217845	external
https://bugzilla.redhat.com/show_bug.cgi?id=2220892	external
https://bugzilla.redhat.com/show_bug.cgi?id=2220893	external
https://bugzilla.redhat.com/show_bug.cgi?id=2225097	external
https://bugzilla.redhat.com/show_bug.cgi?id=2225198	external
https://bugzilla.redhat.com/show_bug.cgi?id=2225239	external
https://bugzilla.redhat.com/show_bug.cgi?id=2225275	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-50661	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420323	external
https://www.cve.org/CVERecord?id=CVE-2022-50661	external
https://nvd.nist.gov/vuln/detail/CVE-2022-50661	external
https://lore.kernel.org/linux-cve-announce/202512…	external
https://access.redhat.com/security/cve/CVE-2023-1637	self
https://bugzilla.redhat.com/show_bug.cgi?id=2181891	external
https://www.cve.org/CVERecord?id=CVE-2023-1637	external
https://nvd.nist.gov/vuln/detail/CVE-2023-1637	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://sourceware.org/bugzilla/show_bug.cgi?id=27398	external
https://access.redhat.com/security/cve/CVE-2023-3390	self
https://bugzilla.redhat.com/show_bug.cgi?id=2213260	external
https://www.cve.org/CVERecord?id=CVE-2023-3390	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3390	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-3610	self
https://bugzilla.redhat.com/show_bug.cgi?id=2225198	external
https://www.cve.org/CVERecord?id=CVE-2023-3610	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3610	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-3776	self
https://bugzilla.redhat.com/show_bug.cgi?id=2225097	external
https://www.cve.org/CVERecord?id=CVE-2023-3776	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3776	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-4004	self
https://bugzilla.redhat.com/show_bug.cgi?id=2225275	external
https://www.cve.org/CVERecord?id=CVE-2023-4004	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4004	external
https://patchwork.ozlabs.org/project/netfilter-de…	external
https://access.redhat.com/security/cve/CVE-2023-4147	self
https://bugzilla.redhat.com/show_bug.cgi?id=2225239	external
https://www.cve.org/CVERecord?id=CVE-2023-4147	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4147	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://www.spinics.net/lists/stable/msg671573.html	external
https://access.redhat.com/security/cve/CVE-2023-20593	self
https://bugzilla.redhat.com/show_bug.cgi?id=2217845	external
https://www.cve.org/CVERecord?id=CVE-2023-20593	external
https://nvd.nist.gov/vuln/detail/CVE-2023-20593	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://www.amd.com/en/resources/product-security…	external
https://access.redhat.com/security/cve/CVE-2023-21102	self
https://bugzilla.redhat.com/show_bug.cgi?id=2213455	external
https://www.cve.org/CVERecord?id=CVE-2023-21102	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21102	external
https://android.googlesource.com/kernel/common/+/…	external
https://access.redhat.com/security/cve/CVE-2023-31248	self
https://bugzilla.redhat.com/show_bug.cgi?id=2220893	external
https://www.cve.org/CVERecord?id=CVE-2023-31248	external
https://nvd.nist.gov/vuln/detail/CVE-2023-31248	external
https://lore.kernel.org/netfilter-devel/202307051…	external
https://www.openwall.com/lists/oss-security/2023/…	external
https://www.zerodayinitiative.com/advisories/ZDI-…	external
https://access.redhat.com/security/cve/CVE-2023-35001	self
https://bugzilla.redhat.com/show_bug.cgi?id=2220892	external
https://www.cve.org/CVERecord?id=CVE-2023-35001	external
https://nvd.nist.gov/vuln/detail/CVE-2023-35001	external
https://lore.kernel.org/netfilter-devel/202307051…	external
https://www.openwall.com/lists/oss-security/2023/…	external
https://access.redhat.com/security/cve/CVE-2023-44466	self
https://bugzilla.redhat.com/show_bug.cgi?id=2241342	external
https://www.cve.org/CVERecord?id=CVE-2023-44466	external
https://nvd.nist.gov/vuln/detail/CVE-2023-44466	external
https://git.kernel.org/cgit/linux/kernel/git/torv…	external
https://access.redhat.com/security/cve/CVE-2023-53383	self
https://bugzilla.redhat.com/show_bug.cgi?id=2396396	external
https://www.cve.org/CVERecord?id=CVE-2023-53383	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53383	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2023-53556	self
https://bugzilla.redhat.com/show_bug.cgi?id=2401478	external
https://www.cve.org/CVERecord?id=CVE-2023-53556	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53556	external
https://lore.kernel.org/linux-cve-announce/202510…	external
https://access.redhat.com/security/cve/CVE-2023-53769	self
https://bugzilla.redhat.com/show_bug.cgi?id=2419909	external
https://www.cve.org/CVERecord?id=CVE-2023-53769	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53769	external
https://lore.kernel.org/linux-cve-announce/202512…	external

Acknowledgments

Salesforce Offensive Security team Alagu M

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2023-4147 (GCVE-0-2023-4147)

Vulnerability from cvelistv5 – Published: 2023-08-07 13:19 – Updated: 2026-02-25 17:20

Title

Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free

Summary

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-09 15:55 UTC

CWE

CWE-416 - Use After Free

Assigner

redhat redhat root

References

14 references

URL	Tags
https://access.redhat.com/errata/RHSA-2023:5069	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:5091	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:5093	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7382	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7411	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4147	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2225239	issue-trackingx_refsource_REDHAT
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://www.spinics.net/lists/stable/msg671573.html
https://lists.debian.org/debian-lts-announce/2023…	x_transferred
https://security.netapp.com/advisory/ntap-2023102…	x_transferred
https://www.debian.org/security/2023/dsa-5480	x_transferred
https://www.debian.org/security/2023/dsa-5492	x_transferred

Impacted products

9 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-284.30.1.el9_2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-284.30.1.rt14.315.el9_2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::realtime cpe:/a:redhat:enterprise_linux:9::nfv
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.80.1.el9_0 , < * (rpm) cpe:/o:redhat:rhel_eus:9.0::baseos cpe:/a:redhat:rhel_eus:9.0::appstream cpe:/a:redhat:rhel_eus:9.0::crb
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.80.1.rt21.151.el9_0 , < * (rpm) cpe:/a:redhat:rhel_eus:9.0::nfv cpe:/a:redhat:rhel_eus:9.0::realtime
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	cpe:/o:redhat:rhel_eus:9.0::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8

Date Public

2023-07-23 10:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:17:12.131Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2023:5069",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:5069"
          },
          {
            "name": "RHSA-2023:5091",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:5091"
          },
          {
            "name": "RHSA-2023:5093",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:5093"
          },
          {
            "name": "RHSA-2023:7382",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7382"
          },
          {
            "name": "RHSA-2023:7389",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7389"
          },
          {
            "name": "RHSA-2023:7411",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7411"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-4147"
          },
          {
            "name": "RHBZ#2225239",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225239"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ebc1064e4874d5987722a2ddbc18f94aa53b211"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231020-0006/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5480"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5492"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/stable/msg671573.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4147",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-09T15:55:27.469292Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-25T17:20:10.372Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.30.1.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.30.1.rt14.315.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.30.1.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.0::baseos",
            "cpe:/a:redhat:rhel_eus:9.0::appstream",
            "cpe:/a:redhat:rhel_eus:9.0::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.80.1.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::nfv",
            "cpe:/a:redhat:rhel_eus:9.0::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.80.1.rt21.151.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.0::baseos"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kpatch-patch",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-07-23T10:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free flaw was found in the Linux kernel\u2019s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-20T07:12:49.304Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2023:5069",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:5069"
        },
        {
          "name": "RHSA-2023:5091",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:5091"
        },
        {
          "name": "RHSA-2023:5093",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:5093"
        },
        {
          "name": "RHSA-2023:7382",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7382"
        },
        {
          "name": "RHSA-2023:7389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7389"
        },
        {
          "name": "RHSA-2023:7411",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:7411"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-4147"
        },
        {
          "name": "RHBZ#2225239",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225239"
        },
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ebc1064e4874d5987722a2ddbc18f94aa53b211"
        },
        {
          "url": "https://www.spinics.net/lists/stable/msg671573.html"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-07-24T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-07-23T10:30:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free",
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-4147",
    "datePublished": "2023-08-07T13:19:43.593Z",
    "dateReserved": "2023-08-03T20:23:06.353Z",
    "dateUpdated": "2026-02-25T17:20:10.372Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-44466 (GCVE-0-2023-44466)

Vulnerability from cvelistv5 – Published: 2023-09-29 00:00 – Updated: 2024-08-02 20:07

Summary

An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

5 references

URL	Tags
https://github.com/google/security-research/secur…
https://www.spinics.net/lists/ceph-devel/msg57909.html
https://github.com/torvalds/linux/commit/a282a2f1…
https://git.kernel.org/cgit/linux/kernel/git/torv…
https://security.netapp.com/advisory/ntap-2023111…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T20:07:33.225Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/google/security-research/security/advisories/GHSA-jg27-jx6w-xwph"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/ceph-devel/msg57909.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/a282a2f10539dce2aa619e71e1817570d557fc97"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a282a2f10539dce2aa619e71e1817570d557fc97"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231116-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-16T15:07:05.929Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/google/security-research/security/advisories/GHSA-jg27-jx6w-xwph"
        },
        {
          "url": "https://www.spinics.net/lists/ceph-devel/msg57909.html"
        },
        {
          "url": "https://github.com/torvalds/linux/commit/a282a2f10539dce2aa619e71e1817570d557fc97"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a282a2f10539dce2aa619e71e1817570d557fc97"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231116-0003/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-44466",
    "datePublished": "2023-09-29T00:00:00.000Z",
    "dateReserved": "2023-09-29T00:00:00.000Z",
    "dateUpdated": "2024-08-02T20:07:33.225Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-53383 (GCVE-0-2023-53383)

Vulnerability from cvelistv5 – Published: 2025-09-18 13:33 – Updated: 2026-05-11 19:43

Title

irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4

Summary

In the Linux kernel, the following vulnerability has been resolved: irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 The T241 platform suffers from the T241-FABRIC-4 erratum which causes unexpected behavior in the GIC when multiple transactions are received simultaneously from different sources. This hardware issue impacts NVIDIA server platforms that use more than two T241 chips interconnected. Each chip has support for 320 {E}SPIs. This issue occurs when multiple packets from different GICs are incorrectly interleaved at the target chip. The erratum text below specifies exactly what can cause multiple transfer packets susceptible to interleaving and GIC state corruption. GIC state corruption can lead to a range of problems, including kernel panics, and unexpected behavior. >From the erratum text: "In some cases, inter-socket AXI4 Stream packets with multiple transfers, may be interleaved by the fabric when presented to ARM Generic Interrupt Controller. GIC expects all transfers of a packet to be delivered without any interleaving. The following GICv3 commands may result in multiple transfer packets over inter-socket AXI4 Stream interface: - Register reads from GICD_I* and GICD_N* - Register writes to 64-bit GICD registers other than GICD_IROUTERn* - ITS command MOVALL Multiple commands in GICv4+ utilize multiple transfer packets, including VMOVP, VMOVI, VMAPP, and 64-bit register accesses." This issue impacts system configurations with more than 2 sockets, that require multi-transfer packets to be sent over inter-socket AXI4 Stream interface between GIC instances on different sockets. GICv4 cannot be supported. GICv3 SW model can only be supported with the workaround. Single and Dual socket configurations are not impacted by this issue and support GICv3 and GICv4." Writing to the chip alias region of the GICD_In{E} registers except GICD_ICENABLERn has an equivalent effect as writing to the global distributor. The SPI interrupt deactivate path is not impacted by the erratum. To fix this problem, implement a workaround that ensures read accesses to the GICD_In{E} registers are directed to the chip that owns the SPI, and disable GICv4.x features. To simplify code changes, the gic_configure_irq() function uses the same alias region for both read and write operations to GICD_ICFGR.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-14 18:56 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root

References

3 references

URL	Tags
https://git.kernel.org/stable/c/86ba4f7b9f949e4c4…
https://git.kernel.org/stable/c/867a4f6cf1a8f511c…
https://git.kernel.org/stable/c/35727af2b15d98a2d…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 021f653791ad17e03f98aaa7fb933816ae16f161 , < 86ba4f7b9f949e4c4bcb425f2a1ce490fea30df0 (git) Affected: 021f653791ad17e03f98aaa7fb933816ae16f161 , < 867a4f6cf1a8f511c06e131477988b3b3e7a0633 (git) Affected: 021f653791ad17e03f98aaa7fb933816ae16f161 , < 35727af2b15d98a2dd2811d631d3a3886111312e (git)
Linux	Linux	Affected: 3.17 Unaffected: 0 , < 3.17 (semver) Unaffected: 6.1.30 , ≤ 6.1.* (semver) Unaffected: 6.3.4 , ≤ 6.3.* (semver) Unaffected: 6.4 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53383",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:56:56.754399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T19:03:04.524Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "Documentation/arm64/silicon-errata.rst",
            "drivers/firmware/smccc/smccc.c",
            "drivers/firmware/smccc/soc_id.c",
            "drivers/irqchip/Kconfig",
            "drivers/irqchip/irq-gic-v3.c",
            "include/linux/arm-smccc.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "86ba4f7b9f949e4c4bcb425f2a1ce490fea30df0",
              "status": "affected",
              "version": "021f653791ad17e03f98aaa7fb933816ae16f161",
              "versionType": "git"
            },
            {
              "lessThan": "867a4f6cf1a8f511c06e131477988b3b3e7a0633",
              "status": "affected",
              "version": "021f653791ad17e03f98aaa7fb933816ae16f161",
              "versionType": "git"
            },
            {
              "lessThan": "35727af2b15d98a2dd2811d631d3a3886111312e",
              "status": "affected",
              "version": "021f653791ad17e03f98aaa7fb933816ae16f161",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "Documentation/arm64/silicon-errata.rst",
            "drivers/firmware/smccc/smccc.c",
            "drivers/firmware/smccc/soc_id.c",
            "drivers/irqchip/Kconfig",
            "drivers/irqchip/irq-gic-v3.c",
            "include/linux/arm-smccc.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.17"
            },
            {
              "lessThan": "3.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.30",
                  "versionStartIncluding": "3.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.4",
                  "versionStartIncluding": "3.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "3.17",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4\n\nThe T241 platform suffers from the T241-FABRIC-4 erratum which causes\nunexpected behavior in the GIC when multiple transactions are received\nsimultaneously from different sources. This hardware issue impacts\nNVIDIA server platforms that use more than two T241 chips\ninterconnected. Each chip has support for 320 {E}SPIs.\n\nThis issue occurs when multiple packets from different GICs are\nincorrectly interleaved at the target chip. The erratum text below\nspecifies exactly what can cause multiple transfer packets susceptible\nto interleaving and GIC state corruption. GIC state corruption can\nlead to a range of problems, including kernel panics, and unexpected\nbehavior.\n\n\u003eFrom the erratum text:\n  \"In some cases, inter-socket AXI4 Stream packets with multiple\n  transfers, may be interleaved by the fabric when presented to ARM\n  Generic Interrupt Controller. GIC expects all transfers of a packet\n  to be delivered without any interleaving.\n\n  The following GICv3 commands may result in multiple transfer packets\n  over inter-socket AXI4 Stream interface:\n   - Register reads from GICD_I* and GICD_N*\n   - Register writes to 64-bit GICD registers other than GICD_IROUTERn*\n   - ITS command MOVALL\n\n  Multiple commands in GICv4+ utilize multiple transfer packets,\n  including VMOVP, VMOVI, VMAPP, and 64-bit register accesses.\"\n\n  This issue impacts system configurations with more than 2 sockets,\n  that require multi-transfer packets to be sent over inter-socket\n  AXI4 Stream interface between GIC instances on different sockets.\n  GICv4 cannot be supported. GICv3 SW model can only be supported\n  with the workaround. Single and Dual socket configurations are not\n  impacted by this issue and support GICv3 and GICv4.\"\n\n\nWriting to the chip alias region of the GICD_In{E} registers except\nGICD_ICENABLERn has an equivalent effect as writing to the global\ndistributor. The SPI interrupt deactivate path is not impacted by\nthe erratum.\n\nTo fix this problem, implement a workaround that ensures read accesses\nto the GICD_In{E} registers are directed to the chip that owns the\nSPI, and disable GICv4.x features. To simplify code changes, the\ngic_configure_irq() function uses the same alias region for both read\nand write operations to GICD_ICFGR."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:43:53.265Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/86ba4f7b9f949e4c4bcb425f2a1ce490fea30df0"
        },
        {
          "url": "https://git.kernel.org/stable/c/867a4f6cf1a8f511c06e131477988b3b3e7a0633"
        },
        {
          "url": "https://git.kernel.org/stable/c/35727af2b15d98a2dd2811d631d3a3886111312e"
        }
      ],
      "title": "irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53383",
    "datePublished": "2025-09-18T13:33:27.731Z",
    "dateReserved": "2025-09-17T14:54:09.736Z",
    "dateUpdated": "2026-05-11T19:43:53.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53556 (GCVE-0-2023-53556)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:17 – Updated: 2026-08-05 09:14

Title

iavf: Fix use-after-free in free_netdev

Summary

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list. Reproducer: [root@host ~]# cat repro.sh #!/bin/bash pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=() function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) } function do_set_channel() { local nic=$(ls -1 --indicator-style=none /sys/bus/pci/devices/${vf0_dbsf}/net/) [ -z "$nic" ] && { sleep $((RANDOM%3)) ; return 1; } ifconfig $nic 192.168.18.5 netmask 255.255.255.0 ifconfig $nic up ethtool -L $nic combined 1 ethtool -L $nic combined 4 sleep $((RANDOM%3)) } function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() } trap "on_exit; exit" EXIT while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!) wait Result: [ 4093.900222] ================================================================== [ 4093.900230] BUG: KASAN: use-after-free in free_netdev+0x308/0x390 [ 4093.900232] Read of size 8 at addr ffff88b4dc145640 by task repro.sh/6699 [ 4093.900233] [ 4093.900236] CPU: 10 PID: 6699 Comm: repro.sh Kdump: loaded Tainted: G O --------- -t - 4.18.0 #1 [ 4093.900238] Hardware name: Powerleader PR2008AL/H12DSi-N6, BIOS 2.0 04/09/2021 [ 4093.900239] Call Trace: [ 4093.900244] dump_stack+0x71/0xab [ 4093.900249] print_address_description+0x6b/0x290 [ 4093.900251] ? free_netdev+0x308/0x390 [ 4093.900252] kasan_report+0x14a/0x2b0 [ 4093.900254] free_netdev+0x308/0x390 [ 4093.900261] iavf_remove+0x825/0xd20 [iavf] [ 4093.900265] pci_device_remove+0xa8/0x1f0 [ 4093.900268] device_release_driver_internal+0x1c6/0x460 [ 4093.900271] pci_stop_bus_device+0x101/0x150 [ 4093.900273] pci_stop_and_remove_bus_device+0xe/0x20 [ 4093.900275] pci_iov_remove_virtfn+0x187/0x420 [ 4093.900277] ? pci_iov_add_virtfn+0xe10/0xe10 [ 4093.900278] ? pci_get_subsys+0x90/0x90 [ 4093.900280] sriov_disable+0xed/0x3e0 [ 4093.900282] ? bus_find_device+0x12d/0x1a0 [ 4093.900290] i40e_free_vfs+0x754/0x1210 [i40e] [ 4093.900298] ? i40e_reset_all_vfs+0x880/0x880 [i40e] [ 4093.900299] ? pci_get_device+0x7c/0x90 [ 4093.900300] ? pci_get_subsys+0x90/0x90 [ 4093.900306] ? pci_vfs_assigned.part.7+0x144/0x210 [ 4093.900309] ? __mutex_lock_slowpath+0x10/0x10 [ 4093.900315] i40e_pci_sriov_configure+0x1fa/0x2e0 [i40e] [ 4093.900318] sriov_numvfs_store+0x214/0x290 [ 4093.900320] ? sriov_totalvfs_show+0x30/0x30 [ 4093.900321] ? __mutex_lock_slowpath+0x10/0x10 [ 4093.900323] ? __check_object_size+0x15a/0x350 [ 4093.900326] kernfs_fop_write+0x280/0x3f0 [ 4093.900329] vfs_write+0x145/0x440 [ 4093.900330] ksys_write+0xab/0x160 [ 4093.900332] ? __ia32_sys_read+0xb0/0xb0 [ 4093.900334] ? fput_many+0x1a/0x120 [ 4093.900335] ? filp_close+0xf0/0x130 [ 4093.900338] do_syscall_64+0xa0/0x370 [ 4093.900339] ? page_fault+0x8/0x30 [ 4093.900341] entry_SYSCALL_64_after_hwframe+0x65/0xca [ 4093.900357] RIP: 0033:0x7f16ad4d22c0 [ 4093.900359] Code: 73 01 c3 48 8b 0d d8 cb 2c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 24 2d 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 fe dd 01 00 48 89 04 24 [ 4093.900360] RSP: 002b:00007ffd6491b7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 4093.900362] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f16ad4d22c0 [ 4093.900363] RDX: 0000000000000002 RSI: 0000000001a41408 RDI: 0000000000000001 [ 4093.900364] RBP: 0000000001a41408 R08: 00007f16ad7a1780 R09: 00007f16ae1f2700 [ 4093.9003 ---truncated---

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/17046107ca15d7571…
https://git.kernel.org/stable/c/a4635f190f332304d…
https://git.kernel.org/stable/c/345c44e18cc10cded…
https://git.kernel.org/stable/c/ca12b98e04b5d1902…
https://git.kernel.org/stable/c/8d781a9c53034813c…
https://git.kernel.org/stable/c/5f4fa1672d98fe99d…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 5eae00c57f5e42bf201023471917da213c4946d6 , < 17046107ca15d7571551539d94e76aba2bf71fd3 (git) Affected: 5eae00c57f5e42bf201023471917da213c4946d6 , < a4635f190f332304db4a49e827ece790b804b5db (git) Affected: 5eae00c57f5e42bf201023471917da213c4946d6 , < 345c44e18cc10cded85cb9134830e1684495c866 (git) Affected: 5eae00c57f5e42bf201023471917da213c4946d6 , < ca12b98e04b5d1902ac08fe826d3500cb4b6e891 (git) Affected: 5eae00c57f5e42bf201023471917da213c4946d6 , < 8d781a9c53034813c3194b7d94409c7d24ac73eb (git) Affected: 5eae00c57f5e42bf201023471917da213c4946d6 , < 5f4fa1672d98fe99d2297b03add35346f1685d6b (git)
Linux	Linux	Affected: 3.14 Unaffected: 0 , < 3.14 (semver) Unaffected: 5.4.251 , ≤ 5.4.* (semver) Unaffected: 5.10.188 , ≤ 5.10.* (semver) Unaffected: 5.15.123 , ≤ 5.15.* (semver) Unaffected: 6.1.42 , ≤ 6.1.* (semver) Unaffected: 6.4.7 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/iavf/iavf_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "17046107ca15d7571551539d94e76aba2bf71fd3",
              "status": "affected",
              "version": "5eae00c57f5e42bf201023471917da213c4946d6",
              "versionType": "git"
            },
            {
              "lessThan": "a4635f190f332304db4a49e827ece790b804b5db",
              "status": "affected",
              "version": "5eae00c57f5e42bf201023471917da213c4946d6",
              "versionType": "git"
            },
            {
              "lessThan": "345c44e18cc10cded85cb9134830e1684495c866",
              "status": "affected",
              "version": "5eae00c57f5e42bf201023471917da213c4946d6",
              "versionType": "git"
            },
            {
              "lessThan": "ca12b98e04b5d1902ac08fe826d3500cb4b6e891",
              "status": "affected",
              "version": "5eae00c57f5e42bf201023471917da213c4946d6",
              "versionType": "git"
            },
            {
              "lessThan": "8d781a9c53034813c3194b7d94409c7d24ac73eb",
              "status": "affected",
              "version": "5eae00c57f5e42bf201023471917da213c4946d6",
              "versionType": "git"
            },
            {
              "lessThan": "5f4fa1672d98fe99d2297b03add35346f1685d6b",
              "status": "affected",
              "version": "5eae00c57f5e42bf201023471917da213c4946d6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/iavf/iavf_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.14"
            },
            {
              "lessThan": "3.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.251",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.123",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.251",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.188",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.123",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.42",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.7",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix use-after-free in free_netdev\n\nWe do netif_napi_add() for all allocated q_vectors[], but potentially\ndo netif_napi_del() for part of them, then kfree q_vectors and leave\ninvalid pointers at dev-\u003enapi_list.\n\nReproducer:\n\n  [root@host ~]# cat repro.sh\n  #!/bin/bash\n\n  pf_dbsf=\"0000:41:00.0\"\n  vf0_dbsf=\"0000:41:02.0\"\n  g_pids=()\n\n  function do_set_numvf()\n  {\n      echo 2 \u003e/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs\n      sleep $((RANDOM%3+1))\n      echo 0 \u003e/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs\n      sleep $((RANDOM%3+1))\n  }\n\n  function do_set_channel()\n  {\n      local nic=$(ls -1 --indicator-style=none /sys/bus/pci/devices/${vf0_dbsf}/net/)\n      [ -z \"$nic\" ] \u0026\u0026 { sleep $((RANDOM%3)) ; return 1; }\n      ifconfig $nic 192.168.18.5 netmask 255.255.255.0\n      ifconfig $nic up\n      ethtool -L $nic combined 1\n      ethtool -L $nic combined 4\n      sleep $((RANDOM%3))\n  }\n\n  function on_exit()\n  {\n      local pid\n      for pid in \"${g_pids[@]}\"; do\n          kill -0 \"$pid\" \u0026\u003e/dev/null \u0026\u0026 kill \"$pid\" \u0026\u003e/dev/null\n      done\n      g_pids=()\n  }\n\n  trap \"on_exit; exit\" EXIT\n\n  while :; do do_set_numvf ; done \u0026\n  g_pids+=($!)\n  while :; do do_set_channel ; done \u0026\n  g_pids+=($!)\n\n  wait\n\nResult:\n\n[ 4093.900222] ==================================================================\n[ 4093.900230] BUG: KASAN: use-after-free in free_netdev+0x308/0x390\n[ 4093.900232] Read of size 8 at addr ffff88b4dc145640 by task repro.sh/6699\n[ 4093.900233]\n[ 4093.900236] CPU: 10 PID: 6699 Comm: repro.sh Kdump: loaded Tainted: G           O     --------- -t - 4.18.0 #1\n[ 4093.900238] Hardware name: Powerleader PR2008AL/H12DSi-N6, BIOS 2.0 04/09/2021\n[ 4093.900239] Call Trace:\n[ 4093.900244]  dump_stack+0x71/0xab\n[ 4093.900249]  print_address_description+0x6b/0x290\n[ 4093.900251]  ? free_netdev+0x308/0x390\n[ 4093.900252]  kasan_report+0x14a/0x2b0\n[ 4093.900254]  free_netdev+0x308/0x390\n[ 4093.900261]  iavf_remove+0x825/0xd20 [iavf]\n[ 4093.900265]  pci_device_remove+0xa8/0x1f0\n[ 4093.900268]  device_release_driver_internal+0x1c6/0x460\n[ 4093.900271]  pci_stop_bus_device+0x101/0x150\n[ 4093.900273]  pci_stop_and_remove_bus_device+0xe/0x20\n[ 4093.900275]  pci_iov_remove_virtfn+0x187/0x420\n[ 4093.900277]  ? pci_iov_add_virtfn+0xe10/0xe10\n[ 4093.900278]  ? pci_get_subsys+0x90/0x90\n[ 4093.900280]  sriov_disable+0xed/0x3e0\n[ 4093.900282]  ? bus_find_device+0x12d/0x1a0\n[ 4093.900290]  i40e_free_vfs+0x754/0x1210 [i40e]\n[ 4093.900298]  ? i40e_reset_all_vfs+0x880/0x880 [i40e]\n[ 4093.900299]  ? pci_get_device+0x7c/0x90\n[ 4093.900300]  ? pci_get_subsys+0x90/0x90\n[ 4093.900306]  ? pci_vfs_assigned.part.7+0x144/0x210\n[ 4093.900309]  ? __mutex_lock_slowpath+0x10/0x10\n[ 4093.900315]  i40e_pci_sriov_configure+0x1fa/0x2e0 [i40e]\n[ 4093.900318]  sriov_numvfs_store+0x214/0x290\n[ 4093.900320]  ? sriov_totalvfs_show+0x30/0x30\n[ 4093.900321]  ? __mutex_lock_slowpath+0x10/0x10\n[ 4093.900323]  ? __check_object_size+0x15a/0x350\n[ 4093.900326]  kernfs_fop_write+0x280/0x3f0\n[ 4093.900329]  vfs_write+0x145/0x440\n[ 4093.900330]  ksys_write+0xab/0x160\n[ 4093.900332]  ? __ia32_sys_read+0xb0/0xb0\n[ 4093.900334]  ? fput_many+0x1a/0x120\n[ 4093.900335]  ? filp_close+0xf0/0x130\n[ 4093.900338]  do_syscall_64+0xa0/0x370\n[ 4093.900339]  ? page_fault+0x8/0x30\n[ 4093.900341]  entry_SYSCALL_64_after_hwframe+0x65/0xca\n[ 4093.900357] RIP: 0033:0x7f16ad4d22c0\n[ 4093.900359] Code: 73 01 c3 48 8b 0d d8 cb 2c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 24 2d 00 00 75 10 b8 01 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 fe dd 01 00 48 89 04 24\n[ 4093.900360] RSP: 002b:00007ffd6491b7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\n[ 4093.900362] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f16ad4d22c0\n[ 4093.900363] RDX: 0000000000000002 RSI: 0000000001a41408 RDI: 0000000000000001\n[ 4093.900364] RBP: 0000000001a41408 R08: 00007f16ad7a1780 R09: 00007f16ae1f2700\n[ 4093.9003\n---truncated---"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable state is created through local device-management interfaces \u2014 the `ethtool -L` (ETHTOOL_SCHANNELS) ioctl on the VF netdev and sysfs/PCI-unbind driver teardown \u2014 and no virtchnl message or received network packet reaches `iavf_free_q_vectors()`. Exploitation therefore requires local access to the system hosting the iavf VF.\nAC:L - The attacker controls both sides of the race described in the commit\u0027s own reproducer, issuing the queue-count reconfiguration and driving the VF reset/teardown loop themselves, and can repeat both indefinitely until `iavf_set_channels()` takes its reset-timeout path that lowers `num_active_queues`. Heap grooming of the freed 8192-byte object before `free_netdev()` is likewise under attacker influence.\nPR:L - Reaching `iavf_set_channels()` only needs `ns_capable(net-\u003euser_ns, CAP_NET_ADMIN)`, which a container or tenant holds over its own network namespace when an SR-IOV VF is delegated into it \u2014 a routine Kubernetes SR-IOV CNI / NFV deployment. No real root in the initial namespace is required to create the NAPI add/del mismatch.\nUI:N - No victim action is needed; the attacker triggers the queue reconfiguration, the resets, and the driver-teardown path themselves in a loop, exactly as in the commit\u0027s reproducer script. Stale `napi_struct` entries also persist on a live `netdev-\u003enapi_list` after a reinit, so no separate administrator action is required.\nS:U - The use-after-free corrupts kernel heap memory and is exploited entirely within the kernel\u0027s own security authority, giving kernel-level control on the same host. No hypervisor, IOMMU, or other security-authority boundary is crossed.\nC:H - The dangling `napi_struct` pointers reference a freed `kmalloc-8k` object that the attacker can reoccupy with sprayed data, and `__netif_napi_del()` reads `napi-\u003estate`, `napi-\u003edev_list`, `napi-\u003eskb`, `napi-\u003egro_hash[]`, and `napi-\u003ethread` from it. Combined with the resulting arbitrary-pointer dereferences, this is leverageable into arbitrary kernel memory disclosure.\nI:H - `__netif_napi_del()` performs `list_del_rcu(\u0026napi-\u003edev_list)` and `hlist_del_init_rcu()` on the freed object, writing to attacker-forged `next`/`prev` pointers \u2014 a direct arbitrary-write primitive \u2014 plus `kfree_skb()` on controlled `napi-\u003eskb`/GRO-hash pointers and `kthread_stop(napi-\u003ethread)`. These are sufficient for control-flow hijacking and full privilege escalation.\nA:H - Even without exploitation the use-after-free corrupts `netdev-\u003enapi_list` and reliably oopses in `free_netdev()`, as shown by the KASAN splat in the commit message. Any list-walk consumer (`free_netdev()`, `netif_set_threaded()`, `__netpoll_setup()`) can panic the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:47.905Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/17046107ca15d7571551539d94e76aba2bf71fd3"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4635f190f332304db4a49e827ece790b804b5db"
        },
        {
          "url": "https://git.kernel.org/stable/c/345c44e18cc10cded85cb9134830e1684495c866"
        },
        {
          "url": "https://git.kernel.org/stable/c/ca12b98e04b5d1902ac08fe826d3500cb4b6e891"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d781a9c53034813c3194b7d94409c7d24ac73eb"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f4fa1672d98fe99d2297b03add35346f1685d6b"
        }
      ],
      "title": "iavf: Fix use-after-free in free_netdev",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53556",
    "datePublished": "2025-10-04T15:17:01.238Z",
    "dateReserved": "2025-10-04T15:14:15.922Z",
    "dateUpdated": "2026-08-05T09:14:47.905Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53769 (GCVE-0-2023-53769)

Vulnerability from cvelistv5 – Published: 2025-12-08 01:19 – Updated: 2026-08-05 09:15

Title

virt/coco/sev-guest: Double-buffer messages

Summary

Severity

9.3 (Critical)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/577a64725bfd77645…
https://git.kernel.org/stable/c/c27dafc4aa50a29ec…
https://git.kernel.org/stable/c/4b69c63f716cfda38…
https://git.kernel.org/stable/c/965006103a14703cc…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d5af44dde5461d125d1602ac913ab5c6bdf09b8b , < 577a64725bfd77645986168e953d405067ee565b (git) Affected: d5af44dde5461d125d1602ac913ab5c6bdf09b8b , < c27dafc4aa50a29ec927b3aa84ac7b430071f682 (git) Affected: d5af44dde5461d125d1602ac913ab5c6bdf09b8b , < 4b69c63f716cfda38e1210e65b68f67f6cee2ddf (git) Affected: d5af44dde5461d125d1602ac913ab5c6bdf09b8b , < 965006103a14703cc42043bbf9b5e0cdf7a468ad (git)
Linux	Linux	Affected: 5.19 Unaffected: 0 , < 5.19 (semver) Unaffected: 6.1.28 , ≤ 6.1.* (semver) Unaffected: 6.2.15 , ≤ 6.2.* (semver) Unaffected: 6.3.2 , ≤ 6.3.* (semver) Unaffected: 6.4 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/virt/coco/sev-guest/sev-guest.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "577a64725bfd77645986168e953d405067ee565b",
              "status": "affected",
              "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b",
              "versionType": "git"
            },
            {
              "lessThan": "c27dafc4aa50a29ec927b3aa84ac7b430071f682",
              "status": "affected",
              "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b",
              "versionType": "git"
            },
            {
              "lessThan": "4b69c63f716cfda38e1210e65b68f67f6cee2ddf",
              "status": "affected",
              "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b",
              "versionType": "git"
            },
            {
              "lessThan": "965006103a14703cc42043bbf9b5e0cdf7a468ad",
              "status": "affected",
              "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/virt/coco/sev-guest/sev-guest.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.19"
            },
            {
              "lessThan": "5.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.28",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.28",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.15",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.2",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt/coco/sev-guest: Double-buffer messages\n\nThe encryption algorithms read and write directly to shared unencrypted\nmemory, which may leak information as well as permit the host to tamper\nwith the message integrity. Instead, copy whole messages in or out as\nneeded before doing any computation on them."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The adversary is the untrusted hypervisor, which attacks the guest kernel through the local shared-memory/VMGEXIT interface (host-writable `set_memory_decrypted()` pages), not via the network stack. This is the standard AV:L mapping for hypervisor-to-confidential-guest attacks.\nAC:L - The replay/tamper attack requires no race at all \u2014 the host rewrites both shared headers while the vCPU is descheduled after the VMGEXIT \u2014 and for the `msg_sz` TOCTOU the hypervisor fully controls guest scheduling (APIC-timer preemption, NPT-fault single-stepping, concurrent writes from another core), so it wins the check-vs-use window deterministically.\nPR:N - SEV-SNP\u0027s entire security premise is that the hypervisor holds zero privilege within the guest\u0027s security authority, so the attacker needs no credentials in the vulnerable component; it only waits for the attestation request that every SNP guest issues automatically at boot, or forces one by resetting the guest.\nUI:N - No human user must act \u2014 the guest request is issued by automated attestation/disk-unlock agents during normal boot, and the host can induce it at will by rebooting the VM.\nS:C - Exploitation breaches the hardware-enforced SEV-SNP boundary, giving a distinct security authority (the hypervisor) read and write reach into guest-protected resources, and a replayed attestation report additionally deceives a third-party remote verifier into releasing secrets \u2014 impact well beyond the vulnerable driver\u0027s own scope.\nC:H - The commit states outright that performing crypto directly in shared memory \"may leak information,\" exposing guest secrets including `SNP_GET_DERIVED_KEY` material used to seal guest disk-encryption keys; the `msg_sz` TOCTOU additionally drags ~64 KB of adjacent private guest memory through the cipher and yields heap corruption leverageable for further disclosure.\nI:H - The host controls both sides of the sequence-number comparison and the decryption IV, letting it replay stale authenticated attestation and derived-key responses and thereby defeat attestation entirely; the `msg_sz` TOCTOU is additionally a length-controlled out-of-bounds write of up to ~64 KB into a kmalloc\u0027d buffer and into an 80-byte on-stack buffer in `get_derived_key()`.\nA:H - The out-of-bounds GCM write overruns the 16 KB guest kernel stack by up to ~64 KB (and smashes the slab in the report paths), guaranteeing a guest kernel panic; failure paths also invoke `snp_disable_vmpck()`, permanently zeroing the VMPCK and killing attestation for the VM\u0027s lifetime."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:15:56.461Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/577a64725bfd77645986168e953d405067ee565b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c27dafc4aa50a29ec927b3aa84ac7b430071f682"
        },
        {
          "url": "https://git.kernel.org/stable/c/4b69c63f716cfda38e1210e65b68f67f6cee2ddf"
        },
        {
          "url": "https://git.kernel.org/stable/c/965006103a14703cc42043bbf9b5e0cdf7a468ad"
        }
      ],
      "title": "virt/coco/sev-guest: Double-buffer messages",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53769",
    "datePublished": "2025-12-08T01:19:32.417Z",
    "dateReserved": "2025-12-08T01:18:04.281Z",
    "dateUpdated": "2026-08-05T09:15:56.461Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2023:5069

CVE-2023-4147 (GCVE-0-2023-4147)

CVE-2023-44466 (GCVE-0-2023-44466)

CVE-2023-53383 (GCVE-0-2023-53383)

CVE-2023-53556 (GCVE-0-2023-53556)

CVE-2023-53769 (GCVE-0-2023-53769)

Tags

Sightings

Nomenclature