8.2
Élevée
CVE-2023-2008 A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler
Description
A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux kernel udmabuf device driver | Versions non publiées | |
| kernel 5.19 | premières → < 5.19 | 5.19 |
| kernel 5.16 | 5.16 → < 5.18.8 | 5.18.8 |
| kernel 5.11 | 5.11 → < 5.15.51 | 5.15.51 |
| kernel 5.5 | 5.5 → < 5.10.127 | 5.10.127 |
| kernel 4.20 | 4.20 → < 5.4.202 | 5.4.202 |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 6 | Versions non publiées |
Afficher les 2 autres branches Masquer les 2 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 7 | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées |
Références
- RHSA-2022:7933 access.redhat.com
- RHSA-2022:8267 access.redhat.com
- RHSA-2023:3465 access.redhat.com
- RHSA-2023:3470 access.redhat.com
- RHSA-2023:3490 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2186862 bugzilla.redhat.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Chronologie
- Publiée
- Dernière modification