Vulnerability-Lookup

RHSA-2024:0448

Vulnerability from csaf_redhat - Published: 2024-01-25 09:45 - Updated: 2026-08-25 14:46

Summary

Red Hat Security Advisory: kernel security and bug fix update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163) * kernel: use after free in unix_stream_sendpage (CVE-2023-4622) * kernel: net/sched: sch_hfsc UAF (CVE-2023-4623) * kernel: eBPF: insufficient stack type checks in dynptr (CVE-2023-39191) * kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871) * kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545) * kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858) * kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162) * kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166) * kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176) * kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race (CVE-2023-3567) * kernel: use-after-free in netfilter: nf_tables (CVE-2023-3777) * kernel: use after free in nft_immediate_deactivate (CVE-2023-4015) * kernel: A heap out-of-bounds write (CVE-2023-5717) * hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569) * kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment (CVE-2023-38409) * kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283) * kernel: SEV-ES local priv escalation (CVE-2023-46813) * kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192) * kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c (CVE-2023-6679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * sev-guest is not loaded automatically in the guest kernel when sev-snp is enabled (BZ#2218934) * Cgroups v2: Current interface to disable cpu load balancing not compatible with kubernetes cgroup hierarchy (BZ#2238754) * WPC ice driver misc irq not getting generated for a interface. (BZ#2245881) * RHEL9.0 - s390/qeth: NET2016 - fix use-after-free in HSCI (BZ#2247798) * pNFS/filelayout: treat GETDEVICEINFO errors as layout failure (BZ#2249557) * cifs: fix dentry lookups in directory handle cache (BZ#2249558) * Performance regression with random 2 KiB writes to ext4 filesystem with 4 KiB filesystem blocks (BZ#2249685) * kernel.spec: Fix UKI naming to comply with BLS (BZ#2254546)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-3545

A vulnerability was found in area_cache_get in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c in the Netronome Flow Processor (NFP) driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debug-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debug-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-zfcpdump-devel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-zfcpdump-devel-matched-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-abi-stablelists-0:5.14.0-284.48.1.el9_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-uki-virt-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-libs-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-libs-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-libs-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-uki-virt-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-modules-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-modules-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-modules-extra-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix Workaround

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-doc-0:5.14.0-284.48.1.el9_2.noarch		—	Workaround

Threats

Impact Moderate

CVE-2022-41858

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2022-50879

A NULL pointer dereference was found in objtool, a build-time tool used during Linux kernel compilation. When find_insn() returns NULL on failure, the code proceeds to dereference the NULL pointer, causing objtool to crash with a segmentation fault during kernel build operations.

0.0 (None)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 201 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debug-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debug-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-64k-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-devel-matched-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-doc-0:5.14.0-284.48.1.el9_2.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-zfcpdump-devel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:kernel-zfcpdump-devel-matched-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.EUS:rtla-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debug-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-64k-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-abi-stablelists-0:5.14.0-284.48.1.el9_2.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debug-uki-virt-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-core-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-modules-extra-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-libs-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-libs-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-tools-libs-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-uki-virt-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-modules-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-modules-core-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:kernel-zfcpdump-modules-extra-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:bpftool-debuginfo-0:7.0.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-284.48.1.el9_2.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2023-1192

A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Low

CVE-2023-2162

A use-after-free flaw was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in the SCSI sub-component in the Linux Kernel. This issue could allow an attacker to leak kernel internal information.

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-2163

An incorrect verifier pruning flaw was found in BPF in the Linux Kernel that may lead to unsafe code paths incorrectly marked as safe, resulting in arbitrary read/writes in kernel memory, lateral privilege escalation, and container escape.

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-682 - Incorrect Calculation

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-2166

A NULL pointer dereference issue was found in the can protocol in net/can/af_can.c in the Linux kernel, where ml_priv may not be initialized in the receive path of CAN frames. This flaw allows a local user to crash the system or cause a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-2176

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-3567

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-3777

A use-after-free flaw was found in the Linux kernel's netfilter: nf_tables component, which can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound, and the chain's owner rule can release the objects in certain circumstances.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-4015

A use-after-free flaw was found in the Linux kernel's netfilter: nf_tables component, which can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can unbind the chain and objects can be deactivated but used later.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-4622

A use-after-free flaw was found in the Linux kernel's af_unix component that allows local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. This issue leads to a race condition where the unix_stream_sendpage() function could access a skb that is being released by garbage collection, resulting in a use-after-free issue.

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-4623

A use-after-free flaw was found in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component that can be exploited to achieve local privilege escalation. If a class with a link-sharing curve, for example, with the HFSC_FSC flag set, has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free issue.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-5717

A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This issue may lead to a system crash, code execution, or local privilege escalation.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-6679

A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 201 products, the same list as for CVE-2022-50879

Threats

Impact Low

CVE-2023-20569

A side channel vulnerability was found in hw amd. Some AMD CPUs may allow an attacker to influence the return address prediction. This issue may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure.

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-38409

A memory corruption flaw was found in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Framebuffer Console in the Linux kernel. This flaw allows a local attacker to crash the system, leading to a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-129 - Improper Validation of Array Index

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-39191

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code in the context of the kernel.

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-40283

A flaw was found in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Bluetooth subsystem in the Linux Kernel. This issue may allow a user to cause a use-after-free problem due to sk's children being mishandled.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 201 products, the same list as for CVE-2022-50879

Threats

Impact Moderate

CVE-2023-45871

A flaw was found in igb_configure_rx_ring in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel. An overflow of the contents from a packet that is too large will overflow into the kernel's ring buffer, leading to a system integrity issue.

7.5 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Important

CVE-2023-46813

A buffer overflow and null pointer dereference flaw was found in the Linux kernel's Secure Encrypted Virtualization (SEV) implementation for AMD functionality. This issue occurs when a user in SEV guest VM accesses MMIO registers, which could allow a local user to crash the system or escalate their privileges on the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-269 - Improper Privilege Management

Affected products

Fixed 200 products, the same list as for CVE-2022-3545

Known not affected 1 product, the same list as for CVE-2022-3545

Threats

Impact Moderate

CVE-2023-52562

In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the commit in Fixes:, if a module that created a slab cache does not release all of its allocated objects before destroying the cache (at rmmod time), we might end up releasing the kmem_cache object without removing it from the slab_caches list thus corrupting the list as kmem_cache_destroy() ignores the return value from shutdown_cache(), which in turn never removes the kmem_cache object from slabs_list in case __kmem_cache_shutdown() fails to release all of the cache's slabs. This is easily observable on a kernel built with CONFIG_DEBUG_LIST=y as after that ill release the system will immediately trip on list_add, or list_del, assertions similar to the one shown below as soon as another kmem_cache gets created, or destroyed: [ 1041.213632] list_del corruption. next->prev should be ffff89f596fb5768, but was 52f1e5016aeee75d. (next=ffff89f595a1b268) [ 1041.219165] ------------[ cut here ]------------ [ 1041.221517] kernel BUG at lib/list_debug.c:62! [ 1041.223452] invalid opcode: 0000 [#1] PREEMPT SMP PTI [ 1041.225408] CPU: 2 PID: 1852 Comm: rmmod Kdump: loaded Tainted: G B W OE 6.5.0 #15 [ 1041.228244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS edk2-20230524-3.fc37 05/24/2023 [ 1041.231212] RIP: 0010:__list_del_entry_valid+0xae/0xb0 Another quick way to trigger this issue, in a kernel with CONFIG_SLUB=y, is to set slub_debug to poison the released objects and then just run cat /proc/slabinfo after removing the module that leaks slab objects, in which case the kernel will panic: [ 50.954843] general protection fault, probably for non-canonical address 0xa56b6b6b6b6b6b8b: 0000 [#1] PREEMPT SMP PTI [ 50.961545] CPU: 2 PID: 1495 Comm: cat Kdump: loaded Tainted: G B W OE 6.5.0 #15 [ 50.966808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS edk2-20230524-3.fc37 05/24/2023 [ 50.972663] RIP: 0010:get_slabinfo+0x42/0xf0 This patch fixes this issue by properly checking shutdown_cache()'s return value before taking the kmem_cache_release() branch.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 201 products, the same list as for CVE-2022-50879

Threats

Impact Low

CVE-2023-52942

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() It was found that the check to see if a partition could use up all the cpus from the parent cpuset in update_parent_subparts_cpumask() was incorrect. As a result, it is possible to leave parent with no effective cpu left even if there are tasks in the parent cpuset. This can lead to system panic as reported in [1]. Fix this probem by updating the check to fail the enabling the partition if parent's effective_cpus is a subset of the child's cpus_allowed. Also record the error code when an error happens in update_prstate() and add a test case where parent partition and child have the same cpu list and parent has task. Enabling partition in the child will fail in this case. [1] https://www.spinics.net/lists/cgroups/msg36254.html

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 201 products, the same list as for CVE-2022-50879

Threats

Impact Low

CVE-2023-52973

In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF After a call to console_unlock() in vcs_read() the vc_data struct can be freed by vc_deallocate(). Because of that, the struct vc_data pointer load must be done at the top of while loop in vcs_read() to avoid a UAF when vcs_size() is called. Syzkaller reported a UAF in vcs_size(). BUG: KASAN: use-after-free in vcs_size (drivers/tty/vt/vc_screen.c:215) Read of size 4 at addr ffff8881137479a8 by task 4a005ed81e27e65/1537 CPU: 0 PID: 1537 Comm: 4a005ed81e27e65 Not tainted 6.2.0-rc5 #1 Hardware name: Red Hat KVM, BIOS 1.15.0-2.module Call Trace: <TASK> __asan_report_load4_noabort (mm/kasan/report_generic.c:350) vcs_size (drivers/tty/vt/vc_screen.c:215) vcs_read (drivers/tty/vt/vc_screen.c:415) vfs_read (fs/read_write.c:468 fs/read_write.c:450) ... </TASK> Allocated by task 1191: ... kmalloc_trace (mm/slab_common.c:1069) vc_allocate (./include/linux/slab.h:580 ./include/linux/slab.h:720 drivers/tty/vt/vt.c:1128 drivers/tty/vt/vt.c:1108) con_install (drivers/tty/vt/vt.c:3383) tty_init_dev (drivers/tty/tty_io.c:1301 drivers/tty/tty_io.c:1413 drivers/tty/tty_io.c:1390) tty_open (drivers/tty/tty_io.c:2080 drivers/tty/tty_io.c:2126) chrdev_open (fs/char_dev.c:415) do_dentry_open (fs/open.c:883) vfs_open (fs/open.c:1014) ... Freed by task 1548: ... kfree (mm/slab_common.c:1021) vc_port_destruct (drivers/tty/vt/vt.c:1094) tty_port_destructor (drivers/tty/tty_port.c:296) tty_port_put (drivers/tty/tty_port.c:312) vt_disallocate_all (drivers/tty/vt/vt_ioctl.c:662 (discriminator 2)) vt_ioctl (drivers/tty/vt/vt_ioctl.c:903) tty_ioctl (drivers/tty/tty_io.c:2776) ... The buggy address belongs to the object at ffff888113747800 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 424 bytes inside of 1024-byte region [ffff888113747800, ffff888113747c00) The buggy address belongs to the physical page: page:00000000b3fe6c7c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113740 head:00000000b3fe6c7c order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 anon flags: 0x17ffffc0010200(slab|head|node=0|zone=2|lastcpupid=0x1fffff) raw: 0017ffffc0010200 ffff888100042dc0 0000000000000000 dead000000000001 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff888113747880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888113747900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb > ffff888113747980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888113747a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888113747a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== Disabling lock debugging due to kernel taint

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 201 products, the same list as for CVE-2022-50879

Threats

Impact Moderate

References

149 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:0448	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2144379	external
https://bugzilla.redhat.com/show_bug.cgi?id=2154178	external
https://bugzilla.redhat.com/show_bug.cgi?id=2161310	external
https://bugzilla.redhat.com/show_bug.cgi?id=2187773	external
https://bugzilla.redhat.com/show_bug.cgi?id=2187813	external
https://bugzilla.redhat.com/show_bug.cgi?id=2187931	external
https://bugzilla.redhat.com/show_bug.cgi?id=2207625	external
https://bugzilla.redhat.com/show_bug.cgi?id=2221463	external
https://bugzilla.redhat.com/show_bug.cgi?id=2226783	external
https://bugzilla.redhat.com/show_bug.cgi?id=2230042	external
https://bugzilla.redhat.com/show_bug.cgi?id=2231800	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237750	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237752	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237757	external
https://bugzilla.redhat.com/show_bug.cgi?id=2237760	external
https://bugzilla.redhat.com/show_bug.cgi?id=2240249	external
https://bugzilla.redhat.com/show_bug.cgi?id=2244723	external
https://bugzilla.redhat.com/show_bug.cgi?id=2246944	external
https://bugzilla.redhat.com/show_bug.cgi?id=2246945	external
https://bugzilla.redhat.com/show_bug.cgi?id=2253986	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-3545	self
https://bugzilla.redhat.com/show_bug.cgi?id=2161310	external
https://www.cve.org/CVERecord?id=CVE-2022-3545	external
https://nvd.nist.gov/vuln/detail/CVE-2022-3545	external
https://git.kernel.org/pub/scm/linux/kernel/git/k…	external
https://access.redhat.com/security/cve/CVE-2022-41858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2144379	external
https://www.cve.org/CVERecord?id=CVE-2022-41858	external
https://nvd.nist.gov/vuln/detail/CVE-2022-41858	external
https://github.com/torvalds/linux/commit/ec4eb8a8…	external
https://access.redhat.com/security/cve/CVE-2022-50879	self
https://bugzilla.redhat.com/show_bug.cgi?id=2426076	external
https://www.cve.org/CVERecord?id=CVE-2022-50879	external
https://nvd.nist.gov/vuln/detail/CVE-2022-50879	external
https://lore.kernel.org/linux-cve-announce/202512…	external
https://access.redhat.com/security/cve/CVE-2023-1192	self
https://bugzilla.redhat.com/show_bug.cgi?id=2154178	external
https://www.cve.org/CVERecord?id=CVE-2023-1192	external
https://nvd.nist.gov/vuln/detail/CVE-2023-1192	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-2162	self
https://bugzilla.redhat.com/show_bug.cgi?id=2187773	external
https://www.cve.org/CVERecord?id=CVE-2023-2162	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2162	external
https://www.spinics.net/lists/linux-scsi/msg181542.html	external
https://access.redhat.com/security/cve/CVE-2023-2163	self
https://bugzilla.redhat.com/show_bug.cgi?id=2240249	external
https://www.cve.org/CVERecord?id=CVE-2023-2163	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2163	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-2166	self
https://bugzilla.redhat.com/show_bug.cgi?id=2187813	external
https://www.cve.org/CVERecord?id=CVE-2023-2166	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2166	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-2176	self
https://bugzilla.redhat.com/show_bug.cgi?id=2187931	external
https://www.cve.org/CVERecord?id=CVE-2023-2176	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2176	external
https://www.spinics.net/lists/linux-rdma/msg114749.html	external
https://access.redhat.com/security/cve/CVE-2023-3567	self
https://bugzilla.redhat.com/show_bug.cgi?id=2221463	external
https://www.cve.org/CVERecord?id=CVE-2023-3567	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3567	external
https://www.spinics.net/lists/stable-commits/msg2…	external
https://access.redhat.com/security/cve/CVE-2023-3777	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237750	external
https://www.cve.org/CVERecord?id=CVE-2023-3777	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3777	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-4015	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237752	external
https://www.cve.org/CVERecord?id=CVE-2023-4015	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4015	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-4622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237760	external
https://www.cve.org/CVERecord?id=CVE-2023-4622	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4622	external
https://git.kernel.org/pub/scm/linux/kernel/git/s…	external
https://access.redhat.com/security/cve/CVE-2023-4623	self
https://bugzilla.redhat.com/show_bug.cgi?id=2237757	external
https://www.cve.org/CVERecord?id=CVE-2023-4623	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4623	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-5717	self
https://bugzilla.redhat.com/show_bug.cgi?id=2246945	external
https://www.cve.org/CVERecord?id=CVE-2023-5717	external
https://nvd.nist.gov/vuln/detail/CVE-2023-5717	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-6679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2253986	external
https://www.cve.org/CVERecord?id=CVE-2023-6679	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6679	external
https://lore.kernel.org/netdev/20231211083758.108…	external
https://access.redhat.com/security/cve/CVE-2023-20569	self
https://bugzilla.redhat.com/show_bug.cgi?id=2207625	external
https://www.cve.org/CVERecord?id=CVE-2023-20569	external
https://nvd.nist.gov/vuln/detail/CVE-2023-20569	external
https://access.redhat.com/solutions/7049120	external
https://www.amd.com/content/dam/amd/en/documents/…	external
https://www.amd.com/en/resources/product-security…	external
https://access.redhat.com/security/cve/CVE-2023-38409	self
https://bugzilla.redhat.com/show_bug.cgi?id=2230042	external
https://www.cve.org/CVERecord?id=CVE-2023-38409	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38409	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-39191	self
https://bugzilla.redhat.com/show_bug.cgi?id=2226783	external
https://www.cve.org/CVERecord?id=CVE-2023-39191	external
https://nvd.nist.gov/vuln/detail/CVE-2023-39191	external
https://www.zerodayinitiative.com/advisories/ZDI-…	external
https://access.redhat.com/security/cve/CVE-2023-40283	self
https://bugzilla.redhat.com/show_bug.cgi?id=2231800	external
https://www.cve.org/CVERecord?id=CVE-2023-40283	external
https://nvd.nist.gov/vuln/detail/CVE-2023-40283	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-45871	self
https://bugzilla.redhat.com/show_bug.cgi?id=2244723	external
https://www.cve.org/CVERecord?id=CVE-2023-45871	external
https://nvd.nist.gov/vuln/detail/CVE-2023-45871	external
https://git.kernel.org/pub/scm/linux/kernel/git/s…	external
https://access.redhat.com/security/cve/CVE-2023-46813	self
https://bugzilla.redhat.com/show_bug.cgi?id=2246944	external
https://www.cve.org/CVERecord?id=CVE-2023-46813	external
https://nvd.nist.gov/vuln/detail/CVE-2023-46813	external
https://bugzilla.suse.com/show_bug.cgi?id=1212649	external
https://cdn.kernel.org/pub/linux/kernel/v6.x/Chan…	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-52562	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267737	external
https://www.cve.org/CVERecord?id=CVE-2023-52562	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52562	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52942	self
https://bugzilla.redhat.com/show_bug.cgi?id=2355498	external
https://www.cve.org/CVERecord?id=CVE-2023-52942	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52942	external
https://lore.kernel.org/linux-cve-announce/202503…	external
https://access.redhat.com/security/cve/CVE-2023-52973	self
https://bugzilla.redhat.com/show_bug.cgi?id=2355433	external
https://www.cve.org/CVERecord?id=CVE-2023-52973	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52973	external
https://lore.kernel.org/linux-cve-announce/202503…	external

Acknowledgments

Duoming Zhou

Pumpkin (@u1f383), working with DEVCORE Internship Program

Wei Chen

(IceSword Lab) Xingyuan Mo

ETH Zurich Johannes Wikner Daniël Trujillo Kaveh Razavi

Zero Day Initiative (ZDI)

JSON

To clipboard

Loading 1.8 MB of JSON…

CVE-2022-3545 (GCVE-0-2022-3545)

Vulnerability from cvelistv5 – Published: 2022-10-17 00:00 – Updated: 2025-04-15 13:43

Title

Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free

Summary

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-14 17:08 UTC

CWE

CWE-119 - Memory Corruption -> CWE-416 Use After Free

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/k…
https://vuldb.com/?id.211045
https://security.netapp.com/advisory/ntap-2022122…
https://www.debian.org/security/2023/dsa-5324	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Impacted products

1 product

Vendor	Product	Version
Linux	Kernel	Affected: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:14:01.597Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://vuldb.com/?id.211045"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221223-0003/"
          },
          {
            "name": "DSA-5324",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5324"
          },
          {
            "name": "[debian-lts-announce] 20230302 [SECURITY] [DLA 3349-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"
          },
          {
            "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-3545",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T17:08:55.254158Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-15T13:43:19.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119 Memory Corruption -\u003e CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a"
        },
        {
          "url": "https://vuldb.com/?id.211045"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221223-0003/"
        },
        {
          "name": "DSA-5324",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5324"
        },
        {
          "name": "[debian-lts-announce] 20230302 [SECURITY] [DLA 3349-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"
        },
        {
          "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
        }
      ],
      "title": "Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free",
      "x_generator": "vuldb.com"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2022-3545",
    "datePublished": "2022-10-17T00:00:00.000Z",
    "dateReserved": "2022-10-17T00:00:00.000Z",
    "dateUpdated": "2025-04-15T13:43:19.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-41858 (GCVE-0-2022-41858)

Vulnerability from cvelistv5 – Published: 2023-01-17 00:00 – Updated: 2025-04-07 16:46

Summary

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-07 16:46 UTC

CWE

CWE-416

Assigner

redhat redhat root

References

2 references

URL	Tags
https://github.com/torvalds/linux/commit/ec4eb8a8…
https://security.netapp.com/advisory/ntap-2023022…

Impacted products

1 product

Vendor	Product	Version
n/a	Linux kernel	Affected: unknown

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:56:38.264Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230223-0006/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:46:04.627051Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:46:38.678Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-23T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230223-0006/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41858",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-04-07T16:46:38.678Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-50879 (GCVE-0-2022-50879)

Vulnerability from cvelistv5 – Published: 2025-12-30 12:23 – Updated: 2026-05-23 15:25

Title

objtool: Fix SEGFAULT

Summary

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix SEGFAULT find_insn() will return NULL in case of failure. Check insn in order to avoid a kernel Oops for NULL pointer dereference.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/418ef921cce2d7415…
https://git.kernel.org/stable/c/0af0e115ff59d638f…
https://git.kernel.org/stable/c/23a249b1185cdd5bf…
https://git.kernel.org/stable/c/38b9415abbd703438…
https://git.kernel.org/stable/c/fcee8a2d4db404a93…
https://git.kernel.org/stable/c/efb11fdb3e1a9f694…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 13810435b9a7014fb92eb715f77da488f3b65b99 , < 418ef921cce2d7415fab7e3e93529227f239e4bb (git) Affected: 13810435b9a7014fb92eb715f77da488f3b65b99 , < 0af0e115ff59d638f45416a004cdd8edb38db40c (git) Affected: 13810435b9a7014fb92eb715f77da488f3b65b99 , < 23a249b1185cdd5bfb6971d1608ba49e589f2288 (git) Affected: 13810435b9a7014fb92eb715f77da488f3b65b99 , < 38b9415abbd703438ebbc6fb74990bd0fbddc5b9 (git) Affected: 13810435b9a7014fb92eb715f77da488f3b65b99 , < fcee8a2d4db404a93e690d79e7273b6ef9d33575 (git) Affected: 13810435b9a7014fb92eb715f77da488f3b65b99 , < efb11fdb3e1a9f694fa12b70b21e69e55ec59c36 (git) Affected: 1f7f88aa4df593db34dd1d6345213f20888687fb (git) Affected: 1bea53df12c47517b6e487e6fed34d0c05d42905 (git) Affected: c6f589eed3b5a9b73b3be76a719917cc905bab0e (git) Affected: 4.9.106 , < 4.10 (semver) Affected: 4.14.48 , < 4.15 (semver) Affected: 4.16.14 , < 4.17 (semver)
Linux	Linux	Affected: 4.17 Unaffected: 0 , < 4.17 (semver) Unaffected: 5.4.229 , ≤ 5.4.* (semver) Unaffected: 5.10.163 , ≤ 5.10.* (semver) Unaffected: 5.15.87 , ≤ 5.15.* (semver) Unaffected: 6.0.17 , ≤ 6.0.* (semver) Unaffected: 6.1.3 , ≤ 6.1.* (semver) Unaffected: 6.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "tools/objtool/check.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "418ef921cce2d7415fab7e3e93529227f239e4bb",
              "status": "affected",
              "version": "13810435b9a7014fb92eb715f77da488f3b65b99",
              "versionType": "git"
            },
            {
              "lessThan": "0af0e115ff59d638f45416a004cdd8edb38db40c",
              "status": "affected",
              "version": "13810435b9a7014fb92eb715f77da488f3b65b99",
              "versionType": "git"
            },
            {
              "lessThan": "23a249b1185cdd5bfb6971d1608ba49e589f2288",
              "status": "affected",
              "version": "13810435b9a7014fb92eb715f77da488f3b65b99",
              "versionType": "git"
            },
            {
              "lessThan": "38b9415abbd703438ebbc6fb74990bd0fbddc5b9",
              "status": "affected",
              "version": "13810435b9a7014fb92eb715f77da488f3b65b99",
              "versionType": "git"
            },
            {
              "lessThan": "fcee8a2d4db404a93e690d79e7273b6ef9d33575",
              "status": "affected",
              "version": "13810435b9a7014fb92eb715f77da488f3b65b99",
              "versionType": "git"
            },
            {
              "lessThan": "efb11fdb3e1a9f694fa12b70b21e69e55ec59c36",
              "status": "affected",
              "version": "13810435b9a7014fb92eb715f77da488f3b65b99",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1f7f88aa4df593db34dd1d6345213f20888687fb",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1bea53df12c47517b6e487e6fed34d0c05d42905",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c6f589eed3b5a9b73b3be76a719917cc905bab0e",
              "versionType": "git"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.106",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.48",
              "versionType": "semver"
            },
            {
              "lessThan": "4.17",
              "status": "affected",
              "version": "4.16.14",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "tools/objtool/check.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "lessThan": "4.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.87",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.163",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.87",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.17",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.3",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.106",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.48",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.16.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nobjtool: Fix SEGFAULT\n\nfind_insn() will return NULL in case of failure. Check insn in order\nto avoid a kernel Oops for NULL pointer dereference."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:25:23.270Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/418ef921cce2d7415fab7e3e93529227f239e4bb"
        },
        {
          "url": "https://git.kernel.org/stable/c/0af0e115ff59d638f45416a004cdd8edb38db40c"
        },
        {
          "url": "https://git.kernel.org/stable/c/23a249b1185cdd5bfb6971d1608ba49e589f2288"
        },
        {
          "url": "https://git.kernel.org/stable/c/38b9415abbd703438ebbc6fb74990bd0fbddc5b9"
        },
        {
          "url": "https://git.kernel.org/stable/c/fcee8a2d4db404a93e690d79e7273b6ef9d33575"
        },
        {
          "url": "https://git.kernel.org/stable/c/efb11fdb3e1a9f694fa12b70b21e69e55ec59c36"
        }
      ],
      "title": "objtool: Fix SEGFAULT",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50879",
    "datePublished": "2025-12-30T12:23:18.858Z",
    "dateReserved": "2025-12-30T12:06:07.137Z",
    "dateUpdated": "2026-05-23T15:25:23.270Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-1192 (GCVE-0-2023-1192)

Vulnerability from cvelistv5 – Published: 2023-11-01 19:01 – Updated: 2025-02-27 20:36

Title

Use-after-free in smb2_is_status_io_timeout()

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-26 21:48 UTC

CWE

CWE-416 - Use After Free

Assigner

redhat redhat root

References

3 references

URL	Tags
https://access.redhat.com/security/cve/CVE-2023-1192	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2154178	issue-trackingx_refsource_REDHAT
https://git.kernel.org/pub/scm/linux/kernel/git/t…

Impacted products

6 products

Vendor	Product	Version
n/a	kernel
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Fedora	Fedora

Date Public

2022-10-02 00:00

Credits

Red Hat would like to thank Pumpkin (@u1f383), working with DEVCORE Internship Program for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:40:59.686Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-1192"
          },
          {
            "name": "RHBZ#2154178",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2154178"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686f"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-1192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-26T21:48:41.125231Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-27T20:36:33.776Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "kernel",
          "vendor": "n/a"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://packages.fedoraproject.org/",
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Fedora",
          "vendor": "Fedora"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Pumpkin (@u1f383), working with DEVCORE Internship Program for reporting this issue."
        }
      ],
      "datePublic": "2022-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-07T16:42:37.540Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-1192"
        },
        {
          "name": "RHBZ#2154178",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2154178"
        },
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686f"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2022-12-16T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2022-10-02T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Use-after-free in smb2_is_status_io_timeout()",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-1192",
    "datePublished": "2023-11-01T19:01:47.336Z",
    "dateReserved": "2023-03-06T08:43:46.689Z",
    "dateUpdated": "2025-02-27T20:36:33.776Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-20569 (GCVE-0-2023-20569)

Vulnerability from cvelistv5 – Published: 2023-08-08 17:02 – Updated: 2024-09-23 03:18

Summary

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

Severity

No CVSS data available.

Assigner

AMD mitre root

References

12 references

URL	Tags
https://www.amd.com/en/corporate/product-security…	vendor-advisory
http://xenbits.xen.org/xsa/advisory-434.html
http://www.openwall.com/lists/oss-security/2023/08/08/4
https://comsec.ethz.ch/research/microarch/inception/
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.debian.org/debian-lts-announce/2023…
https://www.debian.org/security/2023/dsa-5475
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://security.netapp.com/advisory/ntap-2024060…
https://www.amd.com/en/resources/product-security…

Impacted products

26 products

Vendor	Product	Version
AMD	Ryzen™ 3000 Series Desktop Processors	Affected: various
AMD	Ryzen™ PRO 3000 Series Desktop Processors	Affected: various
AMD	Ryzen™ 3000 Series Desktop Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics	Affected: various
AMD	Athlon™ 3000 Series Processors with Radeon™ Graphics	Affected: various
AMD	Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics	Affected: various
AMD	Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ PRO 4000 Series Desktop Processors	Affected: various
AMD	Ryzen™ 5000 Series Desktop Processors	Affected: various
AMD	Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Affected: various
	Ryzen™ PRO 5000 Series Desktop Processors	Affected: various
AMD	Ryzen™ Threadripper™ 2000 Series Processors	Affected: various
AMD	Ryzen™ Threadripper™ 5000 Series Processors	Affected: various
AMD	Ryzen™ Threadripper™ 3000 Series Processors	Affected: various
AMD	Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ 5000 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ PRO 5000 Series Processors	Affected: various
AMD	Ryzen™ 6000 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ PRO 6000 Series Processors	Affected: various
AMD	Ryzen™ 7040 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ 7000 Series Processors	Affected: various
AMD	Ryzen™ 7000 Series Processors with Radeon™ Graphics	Affected: various
AMD	1st Gen AMD EPYC™ Processors	Affected: various
AMD	2nd Gen AMD EPYC™ Processors	Affected: various
AMD	3rd Gen AMD EPYC™ Processors	Affected: various
AMD	4th Gen AMD EPYC™ Processors	Affected: various

Date Public

2023-08-08 16:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-09-23T03:18:32.598Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-434.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/08/4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://comsec.ethz.ch/research/microarch/inception/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5475"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240605-0006/"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 PRO 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 PRO 3000 Series Processors with Radeon\u2122 Vega Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Athlon\u2122 3000 Series Processors with Radeon\u2122 Graphics ",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Athlon\u2122 PRO 3000 Series Processors with Radeon\u2122 Vega Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 4000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 PRO 4000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 5000 Series Desktop Processors ",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": "AGESA",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 PRO 5000 Series Desktop Processors",
          "vendor": " ",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 Threadripper\u2122 2000 Series Processors ",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": " Ryzen\u2122 Threadripper\u2122 5000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 Threadripper\u2122 3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 PRO 5000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 PRO 6000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "packageName": " ",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 7040 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 7000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "x86"
          ],
          "product": "Ryzen\u2122 7000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "x86"
          ],
          "product": " 1st Gen AMD EPYC\u2122 Processors",
          "vendor": "AMD ",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "x86"
          ],
          "product": "2nd Gen AMD EPYC\u2122 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "x86"
          ],
          "product": "3rd Gen AMD EPYC\u2122  Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "x86"
          ],
          "product": "4th Gen AMD EPYC\u2122  Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        }
      ],
      "datePublic": "2023-08-08T16:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA side channel vulnerability on some \u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eof the \u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eAMD CPUs may allow an attacker to influence \u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ethe \u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ereturn address prediction\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e. This may\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e result in speculative execution at an attacker-controlled\u202f\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eaddress\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e, potentially leading to information disclosure.\u003c/span\u003e\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
            }
          ],
          "value": "\n\n\nA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled\u202faddress, potentially leading to information disclosure.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-08T17:02:11.318Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005"
        },
        {
          "url": "http://xenbits.xen.org/xsa/advisory-434.html"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/08/4"
        },
        {
          "url": "https://comsec.ethz.ch/research/microarch/inception/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5475"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240605-0006/"
        }
      ],
      "source": {
        "advisory": "AMD-SB-7005",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2023-20569",
    "datePublished": "2023-08-08T17:02:11.318Z",
    "dateReserved": "2022-10-27T18:53:39.754Z",
    "dateUpdated": "2024-09-23T03:18:32.598Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-2162 (GCVE-0-2023-2162)

Vulnerability from cvelistv5 – Published: 2023-04-19 00:00 – Updated: 2025-03-19 15:32

Summary

A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-06 15:56 UTC

CWE

CWE-416

Assigner

redhat redhat root

References

3 references

URL	Tags
https://www.spinics.net/lists/linux-scsi/msg181542.html
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Impacted products

1 product

Vendor	Product	Version
n/a	Kernel	Affected: Linux Kernel version prior to Kernel 6.2 RC6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T06:12:20.601Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/linux-scsi/msg181542.html"
          },
          {
            "name": "[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"
          },
          {
            "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-2162",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-06T15:56:12.536478Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-19T15:32:43.543Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux Kernel version prior to Kernel 6.2 RC6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T13:06:42.883Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://www.spinics.net/lists/linux-scsi/msg181542.html"
        },
        {
          "name": "[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"
        },
        {
          "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-2162",
    "datePublished": "2023-04-19T00:00:00.000Z",
    "dateReserved": "2023-04-18T00:00:00.000Z",
    "dateUpdated": "2025-03-19T15:32:43.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-2163 (GCVE-0-2023-2163)

Vulnerability from cvelistv5 – Published: 2023-09-20 05:02 – Updated: 2025-02-27 20:49

Title

Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation

Summary

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-26 21:50 UTC

CWE

CWE-682 - Incorrect Calculation

Assigner

Google Google root

References

2 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://bughunters.google.com/blog/63032260261314…	technical-description

Impacted products

1 product

Vendor	Product	Version
Linux	Linux Kernel	Unaffected: 0 , < 5.4 (custom) Affected: 0 , < 71b547f561247897a0a14f3082730156c0533fed (git)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-09T19:05:37.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "technical-description"
            ],
            "url": "https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-2163",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-26T21:50:53.136131Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-27T20:49:30.067Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "71b547f561247897a0a14f3082730156c0533fed",
              "status": "affected",
              "version": "0",
              "versionType": "git"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIncorrect verifier pruning\u0026nbsp;\u003c/span\u003ein BPF in Linux Kernel\u0026nbsp;\u0026gt;=5.4\u0026nbsp;\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eleads to unsafe\u003c/span\u003e\u003cbr\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ecode paths being incorrectly marked as safe, resulting in\u003c/span\u003e\u0026nbsp;arbitrary read/write in\u003cbr\u003ekernel memory, lateral privilege escalation, and container escape.\u003cbr\u003e"
            }
          ],
          "value": "Incorrect verifier pruning\u00a0in BPF in Linux Kernel\u00a0\u003e=5.4\u00a0leads to unsafe\ncode paths being incorrectly marked as safe, resulting in\u00a0arbitrary read/write in\nkernel memory, lateral privilege escalation, and container escape."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-682",
              "description": "CWE-682 Incorrect Calculation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-21T03:43:35.053Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2023-2163",
    "datePublished": "2023-09-20T05:02:38.155Z",
    "dateReserved": "2023-04-18T18:22:35.441Z",
    "dateUpdated": "2025-02-27T20:49:30.067Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-2166 (GCVE-0-2023-2166)

Vulnerability from cvelistv5 – Published: 2023-04-19 00:00 – Updated: 2025-02-05 15:13

Summary

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-05 15:12 UTC

CWE

CWE-476
CWE-476 - NULL Pointer Dereference

Assigner

redhat redhat root

References

1 reference

URL	Tags
https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZ…

Impacted products

1 product

Vendor	Product	Version
n/a	Linux	Affected: Linux Kernel version prior to Kernel 6.1 RC9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T06:12:20.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZrA8FH-kaRsrFy-2metecpTuE5kKHn5w%40mail.gmail.com/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-2166",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-05T15:12:07.422598Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-05T15:13:09.129Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux Kernel version prior to Kernel 6.1 RC9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-19T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZrA8FH-kaRsrFy-2metecpTuE5kKHn5w%40mail.gmail.com/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-2166",
    "datePublished": "2023-04-19T00:00:00.000Z",
    "dateReserved": "2023-04-18T00:00:00.000Z",
    "dateUpdated": "2025-02-05T15:13:09.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-2176 (GCVE-0-2023-2176)

Vulnerability from cvelistv5 – Published: 2023-04-20 00:00 – Updated: 2025-05-05 16:01

Summary

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:28 UTC

CWE

CWE-125

Assigner

redhat redhat root

References

2 references

URL	Tags
https://www.spinics.net/lists/linux-rdma/msg114749.html
https://security.netapp.com/advisory/ntap-2023060…

Impacted products

1 product

Vendor	Product	Version
n/a	Kernel	Affected: Linux 6.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T06:12:20.598Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/linux-rdma/msg114749.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230609-0005/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-2176",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:28:34.519474Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T16:01:21.860Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux 6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-09T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://www.spinics.net/lists/linux-rdma/msg114749.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230609-0005/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-2176",
    "datePublished": "2023-04-20T00:00:00.000Z",
    "dateReserved": "2023-04-19T00:00:00.000Z",
    "dateUpdated": "2025-05-05T16:01:21.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3567 (GCVE-0-2023-3567)

Vulnerability from cvelistv5 – Published: 2023-07-24 15:19 – Updated: 2025-11-06 19:46

Title

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

Summary

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-416 - Use After Free

Assigner

redhat redhat root

References

14 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:0412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0439	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0448	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0575	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-3567	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2221463	issue-trackingx_refsource_REDHAT
https://www.spinics.net/lists/stable-commits/msg2…
http://packetstormsecurity.com/files/175072/Kerne…	x_transferred
http://packetstormsecurity.com/files/175963/Kerne…	x_transferred

Impacted products

13 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::realtime cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:4.18.0-372.87.1.el8_6 , < * (rpm) cpe:/o:redhat:rhev_hypervisor:4.4::el8 cpe:/a:redhat:rhel_eus:8.6::crb cpe:/o:redhat:rhel_eus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:4.18.0-477.43.1.el8_8 , < * (rpm) cpe:/o:redhat:rhel_eus:8.8::baseos cpe:/a:redhat:rhel_eus:8.8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::nfv cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::realtime cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.85.1.el9_0 , < * (rpm) cpe:/o:redhat:rhel_eus:9.0::baseos cpe:/a:redhat:rhel_eus:9.0::crb cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.85.1.rt21.156.el9_0 , < * (rpm) cpe:/a:redhat:rhel_eus:9.0::realtime cpe:/a:redhat:rhel_eus:9.0::nfv
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:5.14.0-284.48.1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.2::appstream cpe:/a:redhat:rhel_eus:9.2::crb cpe:/o:redhat:rhel_eus:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:5.14.0-284.48.1.rt14.333.el9_2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.2::nfv cpe:/a:redhat:rhel_eus:9.2::realtime
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-372.87.1.el8_6 , < * (rpm) cpe:/o:redhat:rhev_hypervisor:4.4::el8 cpe:/a:redhat:rhel_eus:8.6::crb cpe:/o:redhat:rhel_eus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-01-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:56.105Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
          },
          {
            "name": "RHSA-2024:0412",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0412"
          },
          {
            "name": "RHSA-2024:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0431"
          },
          {
            "name": "RHSA-2024:0432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0432"
          },
          {
            "name": "RHSA-2024:0439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0439"
          },
          {
            "name": "RHSA-2024:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0448"
          },
          {
            "name": "RHSA-2024:0575",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0575"
          },
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-3567"
          },
          {
            "name": "RHBZ#2221463",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221463"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/stable-commits/msg285184.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::realtime",
            "cpe:/a:redhat:enterprise_linux:8::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhev_hypervisor:4.4::el8",
            "cpe:/a:redhat:rhel_eus:8.6::crb",
            "cpe:/o:redhat:rhel_eus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-372.87.1.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.8::baseos",
            "cpe:/a:redhat:rhel_eus:8.8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-477.43.1.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.0::baseos",
            "cpe:/a:redhat:rhel_eus:9.0::crb",
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.85.1.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::realtime",
            "cpe:/a:redhat:rhel_eus:9.0::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.85.1.rt21.156.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream",
            "cpe:/a:redhat:rhel_eus:9.2::crb",
            "cpe:/o:redhat:rhel_eus:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.48.1.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::nfv",
            "cpe:/a:redhat:rhel_eus:9.2::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.48.1.rt14.333.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhev_hypervisor:4.4::el8",
            "cpe:/a:redhat:rhel_eus:8.6::crb",
            "cpe:/o:redhat:rhel_eus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-372.87.1.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-01-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T19:46:34.822Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:0412",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0412"
        },
        {
          "name": "RHSA-2024:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0431"
        },
        {
          "name": "RHSA-2024:0432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0432"
        },
        {
          "name": "RHSA-2024:0439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0439"
        },
        {
          "name": "RHSA-2024:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0448"
        },
        {
          "name": "RHSA-2024:0575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0575"
        },
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-3567"
        },
        {
          "name": "RHBZ#2221463",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221463"
        },
        {
          "url": "https://www.spinics.net/lists/stable-commits/msg285184.html"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-04-13T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-01-14T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-3567",
    "datePublished": "2023-07-24T15:19:19.795Z",
    "dateReserved": "2023-07-09T09:05:56.937Z",
    "dateUpdated": "2025-11-06T19:46:34.822Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2024:0448

CVE-2022-3545 (GCVE-0-2022-3545)

CVE-2022-41858 (GCVE-0-2022-41858)

CVE-2022-50879 (GCVE-0-2022-50879)

CVE-2023-1192 (GCVE-0-2023-1192)

CVE-2023-20569 (GCVE-0-2023-20569)

CVE-2023-2162 (GCVE-0-2023-2162)

CVE-2023-2163 (GCVE-0-2023-2163)

CVE-2023-2166 (GCVE-0-2023-2166)

CVE-2023-2176 (GCVE-0-2023-2176)

CVE-2023-3567 (GCVE-0-2023-3567)

Tags

Sightings

Nomenclature