8.2
High
CVE-2023-2008 A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler
Description
A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel udmabuf device driver | Versions not published | |
| kernel 5.19 | earliest → < 5.19 | 5.19 |
| kernel 5.16 | 5.16 → < 5.18.8 | 5.18.8 |
| kernel 5.11 | 5.11 → < 5.15.51 | 5.15.51 |
| kernel 5.5 | 5.5 → < 5.10.127 | 5.10.127 |
| kernel 4.20 | 4.20 → < 5.4.202 | 5.4.202 |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published |
References
- RHSA-2022:7933 access.redhat.com
- RHSA-2022:8267 access.redhat.com
- RHSA-2023:3465 access.redhat.com
- RHSA-2023:3470 access.redhat.com
- RHSA-2023:3490 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2186862 bugzilla.redhat.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified