{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "bpf: Fix re-attachment branch in bpf_tracing_prog_attach {CVE-2024-26591}\n- ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775}\n- smb: client: fix OOB in receive_encrypted_standard() {CVE-2024-0565}\n- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449}\n- net: prevent mss overflow in skb_segment() {CVE-2023-52435}\n- smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}\n- atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780}\n- ida: Fix crash in ida_free when the bitmap is empty {CVE-2023-6915}\n- nvmet: nul-terminate the NQNs passed in the connect command {CVE-2023-6121}\n- netfilter: nf_tables: Reject tables of unsupported family {CVE-2023-6040}\n- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989}\n- NFSD: fix use-after-free in nfsd4_ssc_setup_dul() {CVE-2023-1652}\n- x86/bugs: Flush IBP in ib_prctl_set() {CVE-2023-0045}\n- Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934}\n- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896}\n- x86: Clear .brk area at early boot {CVE-2022-36123}\n- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424}\n- Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}\n- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380}\n- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197}\n- relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}\n- ipv6: rpl: Fix Route of Death. {CVE-2023-2156}\n- ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-2156}\n- net: rpl: fix rpl header size calculation {CVE-2023-2156}\n- memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141}\n- ovl: fix use after free in struct ovl_aio_req {CVE-2023-1252}\n- drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042}\n- netfilter: nf_tables: reject QUEUE/DROP verdict parameters {CVE-2024-1086}\n- perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931}\n- perf: Fix perf_event_validate_size() {CVE-2023-6931}\n- drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-51043}\n- nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6356}\n- nvmet-tcp: remove boilerplate code {CVE-2023-6356}\n- nvmet-tcp: fix a crash in nvmet_req_complete() {CVE-2023-6356}\n- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6356}\n- net: tls, update curr on splice as well {CVE-2024-0646}\n- smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610}\n- smb: client: fix potential OOB in cifs_dump_detail() {CVE-2023-6610}\n- smb: client: fix OOB in smbCalcSize() {CVE-2023-6606}\n- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932}\n- RDMA/core: Update CMA destination address on rdma_resolve_addr {CVE-2023-2176}\n- RDMA/core: Refactor rdma_bind_addr {CVE-2023-2176}\n- nfp: fix use-after-free in area_cache_get() {CVE-2022-3545}\n- netfilter: nf_tables: skip bound chain on rule flush {CVE-2023-3777}\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}\n- drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858}\n- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}\n- net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}\n- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}\n- nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178}\n- net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812}\n- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753}\n- bpf: Fix incorrect verifier pruning due to missing register precision taints {CVE-2023-2163}\n- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4206}\n- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4207}\n- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4208}\n- net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609}\n- libceph: harden msgr2.1 frame segment length checks {CVE-2023-44466}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2024/clsa-2024_1712570434.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "tracking": { "current_release_date": "2026-02-16T09:10:52Z", "generator": { "date": "2026-02-16T09:10:52Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2024:1712570434", "initial_release_date": "2024-04-08T06:00:36Z", "revision_history": [ { "date": "2024-04-08T06:00:36Z", "number": "1", "summary": "Initial version" }, { "date": "2025-11-06T18:25:16Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-02-16T09:10:52Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "kernel: Fix of 49 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-partner@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-uki-virt@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-cross-headers@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-partner@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-core@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-uki-virt@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-core@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@7.0.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-core@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-core@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-extra@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel-matched@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-selftests-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rtla@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel-matched@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-perf@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product": { "name": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_id": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "product": { "name": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "product_id": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-doc@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=noarch" } } }, { "category": "product_version", "name": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "product": { "name": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "product_id": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-abi-stablelists@5.14.0-284.11.1.el9_2.tuxcare.5.els2?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch" }, "product_reference": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch" }, "product_reference": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" }, "product_reference": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-0646", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0646" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0723", "url": "https://access.redhat.com/errata/RHSA-2024:0723" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0724", "url": "https://access.redhat.com/errata/RHSA-2024:0724" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0725", "url": "https://access.redhat.com/errata/RHSA-2024:0725" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0850", "url": "https://access.redhat.com/errata/RHSA-2024:0850" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0851", "url": "https://access.redhat.com/errata/RHSA-2024:0851" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0876", "url": "https://access.redhat.com/errata/RHSA-2024:0876" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0881", "url": "https://access.redhat.com/errata/RHSA-2024:0881" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0897", "url": "https://access.redhat.com/errata/RHSA-2024:0897" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1248", "url": "https://access.redhat.com/errata/RHSA-2024:1248" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1250", "url": "https://access.redhat.com/errata/RHSA-2024:1250" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1251", "url": "https://access.redhat.com/errata/RHSA-2024:1251" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1253", "url": "https://access.redhat.com/errata/RHSA-2024:1253" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1268", "url": "https://access.redhat.com/errata/RHSA-2024:1268" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1269", "url": "https://access.redhat.com/errata/RHSA-2024:1269" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1278", "url": "https://access.redhat.com/errata/RHSA-2024:1278" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1306", "url": "https://access.redhat.com/errata/RHSA-2024:1306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1367", "url": "https://access.redhat.com/errata/RHSA-2024:1367" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1368", "url": "https://access.redhat.com/errata/RHSA-2024:1368" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1377", "url": "https://access.redhat.com/errata/RHSA-2024:1377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1382", "url": "https://access.redhat.com/errata/RHSA-2024:1382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1404", "url": "https://access.redhat.com/errata/RHSA-2024:1404" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2094", "url": "https://access.redhat.com/errata/RHSA-2024:2094" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-0646", "url": "https://access.redhat.com/security/cve/CVE-2024-0646" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2253908", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253908" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" } ], "release_date": "2024-01-17T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-5178", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-5178" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7370", "url": "https://access.redhat.com/errata/RHSA-2023:7370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7379", "url": "https://access.redhat.com/errata/RHSA-2023:7379" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7418", "url": "https://access.redhat.com/errata/RHSA-2023:7418" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7548", "url": "https://access.redhat.com/errata/RHSA-2023:7548" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7549", "url": "https://access.redhat.com/errata/RHSA-2023:7549" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7551", "url": "https://access.redhat.com/errata/RHSA-2023:7551" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7554", "url": "https://access.redhat.com/errata/RHSA-2023:7554" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7557", "url": "https://access.redhat.com/errata/RHSA-2023:7557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7559", "url": "https://access.redhat.com/errata/RHSA-2023:7559" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0340", "url": "https://access.redhat.com/errata/RHSA-2024:0340" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0378", "url": "https://access.redhat.com/errata/RHSA-2024:0378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0386", "url": "https://access.redhat.com/errata/RHSA-2024:0386" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0412", "url": "https://access.redhat.com/errata/RHSA-2024:0412" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0431", "url": "https://access.redhat.com/errata/RHSA-2024:0431" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0432", "url": "https://access.redhat.com/errata/RHSA-2024:0432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0461", "url": "https://access.redhat.com/errata/RHSA-2024:0461" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0554", "url": "https://access.redhat.com/errata/RHSA-2024:0554" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0575", "url": "https://access.redhat.com/errata/RHSA-2024:0575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1268", "url": "https://access.redhat.com/errata/RHSA-2024:1268" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1269", "url": "https://access.redhat.com/errata/RHSA-2024:1269" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1278", "url": "https://access.redhat.com/errata/RHSA-2024:1278" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-5178", "url": "https://access.redhat.com/security/cve/CVE-2023-5178" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2241924", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241924" }, { "category": "external", "summary": "https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/", "url": "https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231208-0004/", "url": "https://security.netapp.com/advisory/ntap-20231208-0004/" } ], "release_date": "2023-11-01T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-1252", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 (\"ovl: fix use after free in struct ovl_aio_req\") not applied yet, the kernel could be affected.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-1252" }, { "category": "external", "summary": "https://lore.kernel.org/lkml/20211115165433.449951285%40linuxfoundation.org/", "url": "https://lore.kernel.org/lkml/20211115165433.449951285%40linuxfoundation.org/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230505-0005/", "url": "https://security.netapp.com/advisory/ntap-20230505-0005/" } ], "release_date": "2023-03-23T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6606", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6606" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0723", "url": "https://access.redhat.com/errata/RHSA-2024:0723" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0725", "url": "https://access.redhat.com/errata/RHSA-2024:0725" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0881", "url": "https://access.redhat.com/errata/RHSA-2024:0881" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0897", "url": "https://access.redhat.com/errata/RHSA-2024:0897" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1188", "url": "https://access.redhat.com/errata/RHSA-2024:1188" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1248", "url": "https://access.redhat.com/errata/RHSA-2024:1248" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1404", "url": "https://access.redhat.com/errata/RHSA-2024:1404" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2094", "url": "https://access.redhat.com/errata/RHSA-2024:2094" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-6606", "url": "https://access.redhat.com/security/cve/CVE-2023-6606" }, { "category": "external", "summary": "https://bugzilla.kernel.org/show_bug.cgi?id=218218", "url": "https://bugzilla.kernel.org/show_bug.cgi?id=218218" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2253611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253611" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" } ], "release_date": "2023-12-08T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-4623", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\n\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\n\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4623" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html", "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f" }, { "category": "external", "summary": "https://kernel.dance/b3d26c5702c7d6c45456326e56d2ccf3f103e60f", "url": "https://kernel.dance/b3d26c5702c7d6c45456326e56d2ccf3f103e60f" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" } ], "release_date": "2023-09-06T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6931", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.\n\nA perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().\n\nWe recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6931" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b" }, { "category": "external", "summary": "https://kernel.dance/382c27f4ed28f803b1f1473ac2d8db0afc795a1b", "url": "https://kernel.dance/382c27f4ed28f803b1f1473ac2d8db0afc795a1b" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html" } ], "release_date": "2023-12-19T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6932", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.\n\nA race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.\n\nWe recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6932" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html", "url": "http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e2b706c691905fe78468c361aaabc719d0a496f1", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e2b706c691905fe78468c361aaabc719d0a496f1" }, { "category": "external", "summary": "https://kernel.dance/e2b706c691905fe78468c361aaabc719d0a496f1", "url": "https://kernel.dance/e2b706c691905fe78468c361aaabc719d0a496f1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html" } ], "release_date": "2023-12-19T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52449", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: Fix gluebi NULL pointer dereference caused by ftl notifier\n\nIf both ftl.ko and gluebi.ko are loaded, the notifier of ftl\ntriggers NULL pointer dereference when trying to access\n‘gluebi->desc’ in gluebi_read().\n\nubi_gluebi_init\n ubi_register_volume_notifier\n ubi_enumerate_volumes\n ubi_notify_all\n gluebi_notify nb->notifier_call()\n gluebi_create\n mtd_device_register\n mtd_device_parse_register\n add_mtd_device\n blktrans_notify_add not->add()\n ftl_add_mtd tr->add_mtd()\n scan_header\n mtd_read\n mtd_read_oob\n mtd_read_oob_std\n gluebi_read mtd->read()\n gluebi->desc - NULL\n\nDetailed reproduction information available at the Link [1],\n\nIn the normal case, obtain gluebi->desc in the gluebi_get_device(),\nand access gluebi->desc in the gluebi_read(). However,\ngluebi_get_device() is not executed in advance in the\nftl_add_mtd() process, which leads to NULL pointer dereference.\n\nThe solution for the gluebi module is to run jffs2 on the UBI\nvolume without considering working with ftl or mtdblock [2].\nTherefore, this problem can be avoided by preventing gluebi from\ncreating the mtdblock device after creating mtd partition of the\ntype MTD_UBIVOLUME.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52449" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/001a3f59d8c914ef8273461d4bf495df384cc5f8", "url": "https://git.kernel.org/stable/c/001a3f59d8c914ef8273461d4bf495df384cc5f8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1bf4fe14e97cda621522eb2f28b0a4e87c5b0745", "url": "https://git.kernel.org/stable/c/1bf4fe14e97cda621522eb2f28b0a4e87c5b0745" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5389407bba1eab1266c6d83e226fb0840cb98dd5", "url": "https://git.kernel.org/stable/c/5389407bba1eab1266c6d83e226fb0840cb98dd5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a43bdc376deab5fff1ceb93dca55bcab8dbdc1d6", "url": "https://git.kernel.org/stable/c/a43bdc376deab5fff1ceb93dca55bcab8dbdc1d6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/aeba358bcc8ffddf9b4a9bd0e5ec9eb338d46022", "url": "https://git.kernel.org/stable/c/aeba358bcc8ffddf9b4a9bd0e5ec9eb338d46022" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b36aaa64d58aaa2f2cbc8275e89bae76a2b6c3dc", "url": "https://git.kernel.org/stable/c/b36aaa64d58aaa2f2cbc8275e89bae76a2b6c3dc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cfd7c9d260dc0a3baaea05a122a19ab91e193c65", "url": "https://git.kernel.org/stable/c/cfd7c9d260dc0a3baaea05a122a19ab91e193c65" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d8ac2537763b54d278b80b2b080e1652523c7d4c", "url": "https://git.kernel.org/stable/c/d8ac2537763b54d278b80b2b080e1652523c7d4c" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" } ], "release_date": "2024-02-22T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-3777", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nWhen nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances.\n\nWe recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-3777" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html", "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html", "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8" }, { "category": "external", "summary": "https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8", "url": "https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5492", "url": "https://www.debian.org/security/2023/dsa-5492" } ], "release_date": "2023-09-06T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-2163", "cwe": { "id": "CWE-682", "name": "Incorrect Calculation" }, "notes": [ { "category": "description", "text": "Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe\ncode paths being incorrectly marked as safe, resulting in arbitrary read/write in\nkernel memory, lateral privilege escalation, and container escape.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-2163" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed" }, { "category": "external", "summary": "https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability", "url": "https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability" } ], "release_date": "2023-09-20T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-51042", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-51042" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628", "url": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628" } ], "release_date": "2024-01-23T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-51043", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-51043" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.5", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.5" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/4e076c73e4f6e90816b30fcd4a0d7ab365087255", "url": "https://github.com/torvalds/linux/commit/4e076c73e4f6e90816b30fcd4a0d7ab365087255" } ], "release_date": "2024-01-23T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-3545", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-3545" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20221223-0003/", "url": "https://security.netapp.com/advisory/ntap-20221223-0003/" }, { "category": "external", "summary": "https://vuldb.com/?id.211045", "url": "https://vuldb.com/?id.211045" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5324", "url": "https://www.debian.org/security/2023/dsa-5324" } ], "release_date": "2022-10-17T12:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-2156", "cwe": { "id": "CWE-617", "name": "Reachable Assertion" }, "notes": [ { "category": "description", "text": "A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-2156" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2023/05/17/8", "url": "http://www.openwall.com/lists/oss-security/2023/05/17/8" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2023/05/17/9", "url": "http://www.openwall.com/lists/oss-security/2023/05/17/9" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2023/05/18/1", "url": "http://www.openwall.com/lists/oss-security/2023/05/18/1" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2023/05/19/1", "url": "http://www.openwall.com/lists/oss-security/2023/05/19/1" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2196292", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196292" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230622-0001/", "url": "https://security.netapp.com/advisory/ntap-20230622-0001/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5448", "url": "https://www.debian.org/security/2023/dsa-5448" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5453", "url": "https://www.debian.org/security/2023/dsa-5453" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-23-547/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-547/" } ], "release_date": "2023-05-09T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-42753", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-42753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7370", "url": "https://access.redhat.com/errata/RHSA-2023:7370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7379", "url": "https://access.redhat.com/errata/RHSA-2023:7379" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7382", "url": "https://access.redhat.com/errata/RHSA-2023:7382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7389", "url": "https://access.redhat.com/errata/RHSA-2023:7389" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7411", "url": "https://access.redhat.com/errata/RHSA-2023:7411" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7418", "url": "https://access.redhat.com/errata/RHSA-2023:7418" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7539", "url": "https://access.redhat.com/errata/RHSA-2023:7539" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7558", "url": "https://access.redhat.com/errata/RHSA-2023:7558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0089", "url": "https://access.redhat.com/errata/RHSA-2024:0089" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0113", "url": "https://access.redhat.com/errata/RHSA-2024:0113" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0134", "url": "https://access.redhat.com/errata/RHSA-2024:0134" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0340", "url": "https://access.redhat.com/errata/RHSA-2024:0340" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0346", "url": "https://access.redhat.com/errata/RHSA-2024:0346" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0347", "url": "https://access.redhat.com/errata/RHSA-2024:0347" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0371", "url": "https://access.redhat.com/errata/RHSA-2024:0371" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0376", "url": "https://access.redhat.com/errata/RHSA-2024:0376" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0378", "url": "https://access.redhat.com/errata/RHSA-2024:0378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0402", "url": "https://access.redhat.com/errata/RHSA-2024:0402" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0403", "url": "https://access.redhat.com/errata/RHSA-2024:0403" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0412", "url": "https://access.redhat.com/errata/RHSA-2024:0412" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0461", "url": "https://access.redhat.com/errata/RHSA-2024:0461" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0562", "url": "https://access.redhat.com/errata/RHSA-2024:0562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0563", "url": "https://access.redhat.com/errata/RHSA-2024:0563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0593", "url": "https://access.redhat.com/errata/RHSA-2024:0593" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0999", "url": "https://access.redhat.com/errata/RHSA-2024:0999" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-42753", "url": "https://access.redhat.com/security/cve/CVE-2023-42753" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2239843", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2239843" }, { "category": "external", "summary": "https://seclists.org/oss-sec/2023/q3/216", "url": "https://seclists.org/oss-sec/2023/q3/216" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html", "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2023/09/22/10", "url": "https://www.openwall.com/lists/oss-security/2023/09/22/10" } ], "release_date": "2023-09-25T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-1380", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-1380" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html", "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html", "url": "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2177883", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2177883" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yonsei.ac.kr/T/#u", "url": "https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yonsei.ac.kr/T/#u" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230511-0001/", "url": "https://security.netapp.com/advisory/ntap-20230511-0001/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5480", "url": "https://www.debian.org/security/2023/dsa-5480" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2023/03/14/1", "url": "https://www.openwall.com/lists/oss-security/2023/03/14/1" } ], "release_date": "2023-03-27T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-0045", "cwe": { "id": "CWE-610", "name": "Externally Controlled Reference to a Resource in Another Sphere" }, "notes": [ { "category": "description", "text": "The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall.  The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176.\n\nWe recommend upgrading past commit a664ec9158eeddd75121d39c9a0758016097fa96", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-0045" }, { "category": "external", "summary": "https://git.kernel.org/tip/a664ec9158eeddd75121d39c9a0758016097fa96", "url": "https://git.kernel.org/tip/a664ec9158eeddd75121d39c9a0758016097fa96" }, { "category": "external", "summary": "https://github.com/google/security-research/security/advisories/GHSA-9x5g-vmxf-4qj8", "url": "https://github.com/google/security-research/security/advisories/GHSA-9x5g-vmxf-4qj8" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230714-0001/", "url": "https://security.netapp.com/advisory/ntap-20230714-0001/" } ], "release_date": "2023-04-25T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-3141", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-3141" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=63264422785021704c39b38f65a78ab9e4a186d7", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=63264422785021704c39b38f65a78ab9e4a186d7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lore.kernel.org/lkml/CAPDyKFoV9aZObZ5GBm0U_-UVeVkBN_rAG-kH3BKoP4EXdYM4bw%40mail.gmail.com/t/", "url": "https://lore.kernel.org/lkml/CAPDyKFoV9aZObZ5GBm0U_-UVeVkBN_rAG-kH3BKoP4EXdYM4bw%40mail.gmail.com/t/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230706-0004/", "url": "https://security.netapp.com/advisory/ntap-20230706-0004/" } ], "release_date": "2023-06-09T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-39197", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-39197" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-39197", "url": "https://access.redhat.com/security/cve/CVE-2023-39197" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2218342", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218342" } ], "release_date": "2024-01-23T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-3812", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-3812" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:6799", "url": "https://access.redhat.com/errata/RHSA-2023:6799" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:6813", "url": "https://access.redhat.com/errata/RHSA-2023:6813" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7370", "url": "https://access.redhat.com/errata/RHSA-2023:7370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7379", "url": "https://access.redhat.com/errata/RHSA-2023:7379" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7382", "url": "https://access.redhat.com/errata/RHSA-2023:7382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7389", "url": "https://access.redhat.com/errata/RHSA-2023:7389" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7411", "url": "https://access.redhat.com/errata/RHSA-2023:7411" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7418", "url": "https://access.redhat.com/errata/RHSA-2023:7418" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7548", "url": "https://access.redhat.com/errata/RHSA-2023:7548" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7549", "url": "https://access.redhat.com/errata/RHSA-2023:7549" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7554", "url": "https://access.redhat.com/errata/RHSA-2023:7554" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0340", "url": "https://access.redhat.com/errata/RHSA-2024:0340" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0378", "url": "https://access.redhat.com/errata/RHSA-2024:0378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0412", "url": "https://access.redhat.com/errata/RHSA-2024:0412" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0461", "url": "https://access.redhat.com/errata/RHSA-2024:0461" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0554", "url": "https://access.redhat.com/errata/RHSA-2024:0554" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0562", "url": "https://access.redhat.com/errata/RHSA-2024:0562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0563", "url": "https://access.redhat.com/errata/RHSA-2024:0563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0575", "url": "https://access.redhat.com/errata/RHSA-2024:0575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0593", "url": "https://access.redhat.com/errata/RHSA-2024:0593" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1961", "url": "https://access.redhat.com/errata/RHSA-2024:1961" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2006", "url": "https://access.redhat.com/errata/RHSA-2024:2006" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2008", "url": "https://access.redhat.com/errata/RHSA-2024:2008" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-3812", "url": "https://access.redhat.com/security/cve/CVE-2023-3812" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2224048", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224048" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0" } ], "release_date": "2023-07-24T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-0775", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0775" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-0775", "url": "https://access.redhat.com/security/cve/CVE-2024-0775" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2259414", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259414" }, { "category": "external", "summary": "https://scm.linefinity.com/common/linux-stable/commit/4c0b4818b1f636bc96359f7817a2d8bab6370162", "url": "https://scm.linefinity.com/common/linux-stable/commit/4c0b4818b1f636bc96359f7817a2d8bab6370162" } ], "release_date": "2024-01-22T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6121", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6121" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2394", "url": "https://access.redhat.com/errata/RHSA-2024:2394" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2950", "url": "https://access.redhat.com/errata/RHSA-2024:2950" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3138", "url": "https://access.redhat.com/errata/RHSA-2024:3138" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-6121", "url": "https://access.redhat.com/security/cve/CVE-2023-6121" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2250043", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250043" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html" } ], "release_date": "2023-11-16T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-51780", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-51780" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/24e90b9e34f9e039f56b5f25f6e6eb92cdd8f4b3", "url": "https://github.com/torvalds/linux/commit/24e90b9e34f9e039f56b5f25f6e6eb92cdd8f4b3" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240419-0001/", "url": "https://security.netapp.com/advisory/ntap-20240419-0001/" } ], "release_date": "2024-01-11T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-3567", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-3567" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0412", "url": "https://access.redhat.com/errata/RHSA-2024:0412" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0431", "url": "https://access.redhat.com/errata/RHSA-2024:0431" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0432", "url": "https://access.redhat.com/errata/RHSA-2024:0432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0439", "url": "https://access.redhat.com/errata/RHSA-2024:0439" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0448", "url": "https://access.redhat.com/errata/RHSA-2024:0448" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0575", "url": "https://access.redhat.com/errata/RHSA-2024:0575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2394", "url": "https://access.redhat.com/errata/RHSA-2024:2394" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2950", "url": "https://access.redhat.com/errata/RHSA-2024:2950" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3138", "url": "https://access.redhat.com/errata/RHSA-2024:3138" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-3567", "url": "https://access.redhat.com/security/cve/CVE-2023-3567" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2221463", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221463" }, { "category": "external", "summary": "https://www.spinics.net/lists/stable-commits/msg285184.html", "url": "https://www.spinics.net/lists/stable-commits/msg285184.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html", "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html", "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html" } ], "release_date": "2023-07-24T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-36123", "notes": [ { "category": "description", "text": "The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-36123" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13", "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13" }, { "category": "external", "summary": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.md", "url": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.md" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/74a0032b8524ee2bd4443128c0bf9775928680b0", "url": "https://github.com/torvalds/linux/commit/74a0032b8524ee2bd4443128c0bf9775928680b0" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/96e8fc5818686d4a1591bb6907e7fdb64ef29884", "url": "https://github.com/torvalds/linux/commit/96e8fc5818686d4a1591bb6907e7fdb64ef29884" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220901-0003/", "url": "https://security.netapp.com/advisory/ntap-20220901-0003/" }, { "category": "external", "summary": "https://sick.codes/sick-2022-128", "url": "https://sick.codes/sick-2022-128" } ], "release_date": "2022-07-29T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-42896", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim.\n\nWe recommend upgrading past commit  https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url \n\n", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-42896" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4", "url": "https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4" }, { "category": "external", "summary": "https://kernel.dance/#711f8c3fb3db61897080468586b970c87c61d9e4", "url": "https://kernel.dance/#711f8c3fb3db61897080468586b970c87c61d9e4" } ], "release_date": "2022-11-23T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-2176", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-2176" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230609-0005/", "url": "https://security.netapp.com/advisory/ntap-20230609-0005/" }, { "category": "external", "summary": "https://www.spinics.net/lists/linux-rdma/msg114749.html", "url": "https://www.spinics.net/lists/linux-rdma/msg114749.html" } ], "release_date": "2023-04-20T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-1989", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in btsdio_remove in drivers\\bluetooth\\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-1989" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=f132c2d13088", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=f132c2d13088" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230601-0004/", "url": "https://security.netapp.com/advisory/ntap-20230601-0004/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5492", "url": "https://www.debian.org/security/2023/dsa-5492" } ], "release_date": "2023-04-11T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-4206", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation.\n\nWhen route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free.\n\nWe recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4206" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8" }, { "category": "external", "summary": "https://kernel.dance/b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8", "url": "https://kernel.dance/b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5492", "url": "https://www.debian.org/security/2023/dsa-5492" } ], "release_date": "2023-09-06T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6040", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6040" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html", "url": "http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/01/12/1", "url": "http://www.openwall.com/lists/oss-security/2024/01/12/1" }, { "category": "external", "summary": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040", "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2024/01/12/1", "url": "https://www.openwall.com/lists/oss-security/2024/01/12/1" } ], "release_date": "2024-01-12T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52434", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential OOBs in smb2_parse_contexts()\n\nValidate offsets and lengths before dereferencing create contexts in\nsmb2_parse_contexts().\n\nThis fixes following oops when accessing invalid create contexts from\nserver:\n\n BUG: unable to handle page fault for address: ffff8881178d8cc3\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 4a01067 P4D 4a01067 PUD 0\n Oops: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014\n RIP: 0010:smb2_parse_contexts+0xa0/0x3a0 [cifs]\n Code: f8 10 75 13 48 b8 93 ad 25 50 9c b4 11 e7 49 39 06 0f 84 d2 00\n 00 00 8b 45 00 85 c0 74 61 41 29 c5 48 01 c5 41 83 fd 0f 76 55 <0f> b7\n 7d 04 0f b7 45 06 4c 8d 74 3d 00 66 83 f8 04 75 bc ba 04 00\n RSP: 0018:ffffc900007939e0 EFLAGS: 00010216\n RAX: ffffc90000793c78 RBX: ffff8880180cc000 RCX: ffffc90000793c90\n RDX: ffffc90000793cc0 RSI: ffff8880178d8cc0 RDI: ffff8880180cc000\n RBP: ffff8881178d8cbf R08: ffffc90000793c22 R09: 0000000000000000\n R10: ffff8880180cc000 R11: 0000000000000024 R12: 0000000000000000\n R13: 0000000000000020 R14: 0000000000000000 R15: ffffc90000793c22\n FS: 00007f873753cbc0(0000) GS:ffff88806bc00000(0000)\n knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: ffff8881178d8cc3 CR3: 00000000181ca000 CR4: 0000000000750ef0\n PKRU: 55555554\n Call Trace:\n \n ? __die+0x23/0x70\n ? page_fault_oops+0x181/0x480\n ? search_module_extables+0x19/0x60\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? exc_page_fault+0x1b6/0x1c0\n ? asm_exc_page_fault+0x26/0x30\n ? smb2_parse_contexts+0xa0/0x3a0 [cifs]\n SMB2_open+0x38d/0x5f0 [cifs]\n ? smb2_is_path_accessible+0x138/0x260 [cifs]\n smb2_is_path_accessible+0x138/0x260 [cifs]\n cifs_is_path_remote+0x8d/0x230 [cifs]\n cifs_mount+0x7e/0x350 [cifs]\n cifs_smb3_do_mount+0x128/0x780 [cifs]\n smb3_get_tree+0xd9/0x290 [cifs]\n vfs_get_tree+0x2c/0x100\n ? capable+0x37/0x70\n path_mount+0x2d7/0xb80\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? _raw_spin_unlock_irqrestore+0x44/0x60\n __x64_sys_mount+0x11a/0x150\n do_syscall_64+0x47/0xf0\n entry_SYSCALL_64_after_hwframe+0x6f/0x77\n RIP: 0033:0x7f8737657b1e", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52434" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/13fb0fc4917621f3dfa285a27eaf7151d770b5e5", "url": "https://git.kernel.org/stable/c/13fb0fc4917621f3dfa285a27eaf7151d770b5e5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/17a0f64cc02d4972e21c733d9f21d1c512963afa", "url": "https://git.kernel.org/stable/c/17a0f64cc02d4972e21c733d9f21d1c512963afa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1ae3c59355dc9882e09c020afe8ffbd895ad0f29", "url": "https://git.kernel.org/stable/c/1ae3c59355dc9882e09c020afe8ffbd895ad0f29" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6726429c18c62dbf5e96ebbd522f262e016553fb", "url": "https://git.kernel.org/stable/c/6726429c18c62dbf5e96ebbd522f262e016553fb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/890bc4fac3c0973a49cac35f634579bebba7fe48", "url": "https://git.kernel.org/stable/c/890bc4fac3c0973a49cac35f634579bebba7fe48" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/af1689a9b7701d9907dfc84d2a4b57c4bc907144", "url": "https://git.kernel.org/stable/c/af1689a9b7701d9907dfc84d2a4b57c4bc907144" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250117-0009/", "url": "https://security.netapp.com/advisory/ntap-20250117-0009/" } ], "release_date": "2024-02-20T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-0565", "cwe": { "id": "CWE-191", "name": "Integer Underflow (Wrap or Wraparound)" }, "notes": [ { "category": "description", "text": "An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0565" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1188", "url": "https://access.redhat.com/errata/RHSA-2024:1188" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1404", "url": "https://access.redhat.com/errata/RHSA-2024:1404" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1532", "url": "https://access.redhat.com/errata/RHSA-2024:1532" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1533", "url": "https://access.redhat.com/errata/RHSA-2024:1533" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1607", "url": "https://access.redhat.com/errata/RHSA-2024:1607" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1614", "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2093", "url": "https://access.redhat.com/errata/RHSA-2024:2093" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2394", "url": "https://access.redhat.com/errata/RHSA-2024:2394" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-0565", "url": "https://access.redhat.com/security/cve/CVE-2024-0565" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2258518", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258518" }, { "category": "external", "summary": "https://www.spinics.net/lists/stable-commits/msg328851.html", "url": "https://www.spinics.net/lists/stable-commits/msg328851.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240223-0002/", "url": "https://security.netapp.com/advisory/ntap-20240223-0002/" } ], "release_date": "2024-01-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-26591", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix re-attachment branch in bpf_tracing_prog_attach\n\nThe following case can cause a crash due to missing attach_btf:\n\n1) load rawtp program\n2) load fentry program with rawtp as target_fd\n3) create tracing link for fentry program with target_fd = 0\n4) repeat 3\n\nIn the end we have:\n\n- prog->aux->dst_trampoline == NULL\n- tgt_prog == NULL (because we did not provide target_fd to link_create)\n- prog->aux->attach_btf == NULL (the program was loaded with attach_prog_fd=X)\n- the program was loaded for tgt_prog but we have no way to find out which one\n\n BUG: kernel NULL pointer dereference, address: 0000000000000058\n Call Trace:\n \n ? __die+0x20/0x70\n ? page_fault_oops+0x15b/0x430\n ? fixup_exception+0x22/0x330\n ? exc_page_fault+0x6f/0x170\n ? asm_exc_page_fault+0x22/0x30\n ? bpf_tracing_prog_attach+0x279/0x560\n ? btf_obj_id+0x5/0x10\n bpf_tracing_prog_attach+0x439/0x560\n __sys_bpf+0x1cf4/0x2de0\n __x64_sys_bpf+0x1c/0x30\n do_syscall_64+0x41/0xf0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nReturn -EINVAL in this situation.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26591" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/50ae82f080cf87e84828f066c31723b781d68f5b", "url": "https://git.kernel.org/stable/c/50ae82f080cf87e84828f066c31723b781d68f5b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6cc9c0af0aa06f781fa515a1734b1a4239dfd2c0", "url": "https://git.kernel.org/stable/c/6cc9c0af0aa06f781fa515a1734b1a4239dfd2c0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/715d82ba636cb3629a6e18a33bb9dbe53f9936ee", "url": "https://git.kernel.org/stable/c/715d82ba636cb3629a6e18a33bb9dbe53f9936ee" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8c8bcd45e9b10eef12321f08d2e5be33d615509c", "url": "https://git.kernel.org/stable/c/8c8bcd45e9b10eef12321f08d2e5be33d615509c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a7b98aa10f895e2569403896f2d19b73b6c95653", "url": "https://git.kernel.org/stable/c/a7b98aa10f895e2569403896f2d19b73b6c95653" } ], "release_date": "2024-02-22T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2022-45934", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-45934" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=ae4569813a6e931258db627cdfe50dfb4f917d5d", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=ae4569813a6e931258db627cdfe50dfb4f917d5d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDAKCGDW6CQ6G3RZWYZJO454R3L5CTQB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDAKCGDW6CQ6G3RZWYZJO454R3L5CTQB/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230113-0008/", "url": "https://security.netapp.com/advisory/ntap-20230113-0008/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5324", "url": "https://www.debian.org/security/2023/dsa-5324" } ], "release_date": "2022-11-27T04:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-1086", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1086" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/10/22", "url": "http://www.openwall.com/lists/oss-security/2024/04/10/22" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/10/23", "url": "http://www.openwall.com/lists/oss-security/2024/04/10/23" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/14/1", "url": "http://www.openwall.com/lists/oss-security/2024/04/14/1" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/15/2", "url": "http://www.openwall.com/lists/oss-security/2024/04/15/2" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/17/5", "url": "http://www.openwall.com/lists/oss-security/2024/04/17/5" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660" }, { "category": "external", "summary": "https://github.com/Notselwyn/CVE-2024-1086", "url": "https://github.com/Notselwyn/CVE-2024-1086" }, { "category": "external", "summary": "https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660", "url": "https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/" }, { "category": "external", "summary": "https://news.ycombinator.com/item?id=39828424", "url": "https://news.ycombinator.com/item?id=39828424" }, { "category": "external", "summary": "https://pwning.tech/nftables/", "url": "https://pwning.tech/nftables/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240614-0009/", "url": "https://security.netapp.com/advisory/ntap-20240614-0009/" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1086", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1086" } ], "release_date": "2024-01-31T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6610", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0723", "url": "https://access.redhat.com/errata/RHSA-2024:0723" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0724", "url": "https://access.redhat.com/errata/RHSA-2024:0724" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0725", "url": "https://access.redhat.com/errata/RHSA-2024:0725" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0881", "url": "https://access.redhat.com/errata/RHSA-2024:0881" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0897", "url": "https://access.redhat.com/errata/RHSA-2024:0897" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1248", "url": "https://access.redhat.com/errata/RHSA-2024:1248" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1404", "url": "https://access.redhat.com/errata/RHSA-2024:1404" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2094", "url": "https://access.redhat.com/errata/RHSA-2024:2094" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-6610", "url": "https://access.redhat.com/security/cve/CVE-2023-6610" }, { "category": "external", "summary": "https://bugzilla.kernel.org/show_bug.cgi?id=218219", "url": "https://bugzilla.kernel.org/show_bug.cgi?id=218219" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2253614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253614" } ], "release_date": "2023-12-08T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-3609", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-3609" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html", "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html", "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc" }, { "category": "external", "summary": "https://kernel.dance/04c55383fa5689357bcdd2c8036725a55ed632bc", "url": "https://kernel.dance/04c55383fa5689357bcdd2c8036725a55ed632bc" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230818-0005/", "url": "https://security.netapp.com/advisory/ntap-20230818-0005/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5480", "url": "https://www.debian.org/security/2023/dsa-5480" } ], "release_date": "2023-07-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-1838", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-1838" }, { "category": "external", "summary": "https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang%40redhat.com/T/", "url": "https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang%40redhat.com/T/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230517-0003/", "url": "https://security.netapp.com/advisory/ntap-20230517-0003/" } ], "release_date": "2023-04-05T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-44466", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-44466" }, { "category": "external", "summary": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a282a2f10539dce2aa619e71e1817570d557fc97", "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a282a2f10539dce2aa619e71e1817570d557fc97" }, { "category": "external", "summary": "https://github.com/google/security-research/security/advisories/GHSA-jg27-jx6w-xwph", "url": "https://github.com/google/security-research/security/advisories/GHSA-jg27-jx6w-xwph" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/a282a2f10539dce2aa619e71e1817570d557fc97", "url": "https://github.com/torvalds/linux/commit/a282a2f10539dce2aa619e71e1817570d557fc97" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231116-0003/", "url": "https://security.netapp.com/advisory/ntap-20231116-0003/" }, { "category": "external", "summary": "https://www.spinics.net/lists/ceph-devel/msg57909.html", "url": "https://www.spinics.net/lists/ceph-devel/msg57909.html" } ], "release_date": "2023-09-29T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6356", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6356" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0723", "url": "https://access.redhat.com/errata/RHSA-2024:0723" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0724", "url": "https://access.redhat.com/errata/RHSA-2024:0724" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0725", "url": "https://access.redhat.com/errata/RHSA-2024:0725" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0881", "url": "https://access.redhat.com/errata/RHSA-2024:0881" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0897", "url": "https://access.redhat.com/errata/RHSA-2024:0897" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1248", "url": "https://access.redhat.com/errata/RHSA-2024:1248" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2094", "url": "https://access.redhat.com/errata/RHSA-2024:2094" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3810", "url": "https://access.redhat.com/errata/RHSA-2024:3810" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-6356", "url": "https://access.redhat.com/security/cve/CVE-2023-6356" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2254054", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254054" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFYW6R64GPLUOXSQBJI3JBUX3HGLAYPP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFYW6R64GPLUOXSQBJI3JBUX3HGLAYPP/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240415-0002/", "url": "https://security.netapp.com/advisory/ntap-20240415-0002/" } ], "release_date": "2024-02-07T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-40283", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-40283" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html", "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html", "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e7c32e4a1", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e7c32e4a1" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/1728137b33c00d5a2b5110ed7aafb42e7c32e4a1", "url": "https://github.com/torvalds/linux/commit/1728137b33c00d5a2b5110ed7aafb42e7c32e4a1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231020-0007/", "url": "https://security.netapp.com/advisory/ntap-20231020-0007/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5480", "url": "https://www.debian.org/security/2023/dsa-5480" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5492", "url": "https://www.debian.org/security/2023/dsa-5492" } ], "release_date": "2023-08-14T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-3424", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-3424" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2132640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2132640" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc", "url": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html" }, { "category": "external", "summary": "https://lore.kernel.org/all/20221019031445.901570-1-zyytlz.wz%40163.com/", "url": "https://lore.kernel.org/all/20221019031445.901570-1-zyytlz.wz%40163.com/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230406-0005/", "url": "https://security.netapp.com/advisory/ntap-20230406-0005/" }, { "category": "external", "summary": "https://www.spinics.net/lists/kernel/msg4518970.html", "url": "https://www.spinics.net/lists/kernel/msg4518970.html" } ], "release_date": "2023-03-06T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-41858", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-41858" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798", "url": "https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230223-0006/", "url": "https://security.netapp.com/advisory/ntap-20230223-0006/" } ], "release_date": "2023-01-17T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-4207", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.\n\nWhen fw_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free.\n\nWe recommend upgrading past commit 76e42ae831991c828cffa8c37736ebfb831ad5ec.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4207" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec" }, { "category": "external", "summary": "https://kernel.dance/76e42ae831991c828cffa8c37736ebfb831ad5ec", "url": "https://kernel.dance/76e42ae831991c828cffa8c37736ebfb831ad5ec" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5492", "url": "https://www.debian.org/security/2023/dsa-5492" } ], "release_date": "2023-09-06T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6915", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6915" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2394", "url": "https://access.redhat.com/errata/RHSA-2024:2394" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2950", "url": "https://access.redhat.com/errata/RHSA-2024:2950" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3138", "url": "https://access.redhat.com/errata/RHSA-2024:3138" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-6915", "url": "https://access.redhat.com/security/cve/CVE-2023-6915" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2254982", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254982" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a", "url": "https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" } ], "release_date": "2024-01-15T10:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-52435", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: prevent mss overflow in skb_segment()\n\nOnce again syzbot is able to crash the kernel in skb_segment() [1]\n\nGSO_BY_FRAGS is a forbidden value, but unfortunately the following\ncomputation in skb_segment() can reach it quite easily :\n\n\tmss = mss * partial_segs;\n\n65535 = 3 * 5 * 17 * 257, so many initial values of mss can lead to\na bad final result.\n\nMake sure to limit segmentation so that the new mss value is smaller\nthan GSO_BY_FRAGS.\n\n[1]\n\ngeneral protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN\nKASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077]\nCPU: 1 PID: 5079 Comm: syz-executor993 Not tainted 6.7.0-rc4-syzkaller-00141-g1ae4cd3cbdd0 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023\nRIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551\nCode: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00\nRSP: 0018:ffffc900043473d0 EFLAGS: 00010202\nRAX: dffffc0000000000 RBX: 0000000000010046 RCX: ffffffff886b1597\nRDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070\nRBP: ffffc90004347578 R08: 0000000000000005 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000002 R12: ffff888063202ac0\nR13: 0000000000010000 R14: 000000000000ffff R15: 0000000000000046\nFS: 0000555556e7e380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000020010000 CR3: 0000000027ee2000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n\nudp6_ufo_fragment+0xa0e/0xd00 net/ipv6/udp_offload.c:109\nipv6_gso_segment+0x534/0x17e0 net/ipv6/ip6_offload.c:120\nskb_mac_gso_segment+0x290/0x610 net/core/gso.c:53\n__skb_gso_segment+0x339/0x710 net/core/gso.c:124\nskb_gso_segment include/net/gso.h:83 [inline]\nvalidate_xmit_skb+0x36c/0xeb0 net/core/dev.c:3626\n__dev_queue_xmit+0x6f3/0x3d60 net/core/dev.c:4338\ndev_queue_xmit include/linux/netdevice.h:3134 [inline]\npacket_xmit+0x257/0x380 net/packet/af_packet.c:276\npacket_snd net/packet/af_packet.c:3087 [inline]\npacket_sendmsg+0x24c6/0x5220 net/packet/af_packet.c:3119\nsock_sendmsg_nosec net/socket.c:730 [inline]\n__sock_sendmsg+0xd5/0x180 net/socket.c:745\n__sys_sendto+0x255/0x340 net/socket.c:2190\n__do_sys_sendto net/socket.c:2202 [inline]\n__se_sys_sendto net/socket.c:2198 [inline]\n__x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0x40/0x110 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x63/0x6b\nRIP: 0033:0x7f8692032aa9\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fff8d685418 EFLAGS: 00000246 ORIG_RAX: 000000000000002c\nRAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8692032aa9\nRDX: 0000000000010048 RSI: 00000000200000c0 RDI: 0000000000000003\nRBP: 00000000000f4240 R08: 0000000020000540 R09: 0000000000000014\nR10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8d685480\nR13: 0000000000000001 R14: 00007fff8d685480 R15: 0000000000000003\n\nModules linked in:\n---[ end trace 0000000000000000 ]---\nRIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551\nCode: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00\nRSP: 0018:ffffc900043473d0 EFLAGS: 00010202\nRAX: dffffc0000000000 RBX: 0000000000010046 RCX: ffffffff886b1597\nRDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070\nRBP: ffffc90004347578 R0\n---truncated---", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52435" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0d3ffbbf8631d6db0552f46250015648991c856f", "url": "https://git.kernel.org/stable/c/0d3ffbbf8631d6db0552f46250015648991c856f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/23d05d563b7e7b0314e65c8e882bc27eac2da8e7", "url": "https://git.kernel.org/stable/c/23d05d563b7e7b0314e65c8e882bc27eac2da8e7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6c53e8547687d9c767c139cd4b50af566f58c29a", "url": "https://git.kernel.org/stable/c/6c53e8547687d9c767c139cd4b50af566f58c29a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8f8f185643747fbb448de6aab0efa51c679909a3", "url": "https://git.kernel.org/stable/c/8f8f185643747fbb448de6aab0efa51c679909a3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/95b3904a261a9f810205da560e802cc326f50d77", "url": "https://git.kernel.org/stable/c/95b3904a261a9f810205da560e802cc326f50d77" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/989b0ff35fe5fc9652ee5bafbe8483db6f27b137", "url": "https://git.kernel.org/stable/c/989b0ff35fe5fc9652ee5bafbe8483db6f27b137" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cd1022eaf87be8e6151435bd4df4c242c347e083", "url": "https://git.kernel.org/stable/c/cd1022eaf87be8e6151435bd4df4c242c347e083" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" } ], "release_date": "2024-02-20T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-4208", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\nWhen u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free.\n\nWe recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4208" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81" }, { "category": "external", "summary": "https://kernel.dance/3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81", "url": "https://kernel.dance/3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5492", "url": "https://www.debian.org/security/2023/dsa-5492" } ], "release_date": "2023-09-06T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-1652", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-1652" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/cve-2023-1652", "url": "https://access.redhat.com/security/cve/cve-2023-1652" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230511-0006/", "url": "https://security.netapp.com/advisory/ntap-20230511-0006/" } ], "release_date": "2023-03-29T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-3268", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-3268" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/", "url": "https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230824-0006/", "url": "https://security.netapp.com/advisory/ntap-20230824-0006/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5448", "url": "https://www.debian.org/security/2023/dsa-5448" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5480", "url": "https://www.debian.org/security/2023/dsa-5480" } ], "release_date": "2023-06-16T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-04-08T06:00:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1712570434" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }