Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-3327 (GCVE-0-2023-3327)
Vulnerability from cvelistv5 – Published: – Updated: 2023-06-27 00:00DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2023-06-27T00:00:00.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"rejectedReasons": [
{
"lang": "en",
"value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2023-3327",
"dateRejected": "2023-06-27T00:00:00.000Z",
"dateReserved": "2023-06-19T00:00:00.000Z",
"dateUpdated": "2023-06-27T00:00:00.000Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
}
],
"id": "CVE-2023-3327",
"lastModified": "2023-11-07T04:18:30.563",
"published": "2023-06-27T23:15:09.657",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Rejected"
},
"nvd": {
"cve": {
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
}
],
"id": "CVE-2023-3327",
"lastModified": "2023-11-07T04:18:30.563",
"metrics": {},
"published": "2023-06-27T23:15:09.657",
"references": [],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Rejected"
}
}
}
}
FKIE_CVE-2023-3327
Vulnerability from fkie_nvd - Published: 2023-06-27 23:15 - Updated: 2023-11-07 04:18| URL | Tags |
|---|
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
}
],
"id": "CVE-2023-3327",
"lastModified": "2023-11-07T04:18:30.563",
"metrics": {},
"published": "2023-06-27T23:15:09.657",
"references": [],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Rejected"
}
GSD-2023-3327
Vulnerability from gsd - Updated: 2023-12-13 01:20{
"GSD": {
"alias": "CVE-2023-3327",
"id": "GSD-2023-3327"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-3327"
],
"details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
"id": "GSD-2023-3327",
"modified": "2023-12-13T01:20:54.741018Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2023-3327",
"STATE": "REJECT"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
}
]
}
}
}
}
OESA-2023-1841 (CVE-2022-45884)
Vulnerability from osv_openeuler – Published: 2023-11-17 11:06 – Updated: 2026-08-06 11:06 – Source websiteThe Linux Kernel, the operating system core itself.
Security Fix(es):
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
(CVE-2023-4623)
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"kernel-tools-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"python2-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-devel-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-debugsource-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-source-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-tools-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"python3-perf-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"perf-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"python2-perf-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"perf-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"python3-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"bpftool-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-tools-devel-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"bpftool-4.19.90-2311.3.0.0226.oe1.aarch64.rpm"
],
"src": [
"kernel-4.19.90-2311.3.0.0226.oe1.src.rpm"
],
"x86_64": [
"perf-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-tools-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-source-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-tools-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"perf-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-tools-devel-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-devel-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python3-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-debugsource-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python3-perf-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python2-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"bpftool-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python2-perf-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"bpftool-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:20.03-LTS-SP1",
"name": "kernel",
"purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP1"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.19.90-2311.3.0.0226.oe1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)\r\n\r\nRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)\r\n\r\nA race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\r\n\r\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\r\n\r\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.\r\n\r\n(CVE-2023-4623)",
"id": "OESA-2023-1841",
"modified": "2026-08-06T11:06:17Z",
"published": "2023-11-17T11:06:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1841"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45884"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3327"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39198"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4623"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "kernel security update",
"upstream": [
"CVE-2022-45884",
"CVE-2023-3327",
"CVE-2023-39198",
"CVE-2023-4623"
]
}
OESA-2023-1842 (CVE-2022-45884)
Vulnerability from osv_openeuler – Published: 2023-11-17 11:06 – Updated: 2026-08-06 11:06 – Source websiteThe Linux Kernel, the operating system core itself.
Security Fix(es):
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
(CVE-2023-4623)
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"python2-perf-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-devel-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-tools-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-debugsource-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"bpftool-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-tools-devel-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"python3-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"perf-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"python2-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"bpftool-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-tools-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-debuginfo-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"kernel-source-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"perf-4.19.90-2311.3.0.0226.oe1.aarch64.rpm",
"python3-perf-4.19.90-2311.3.0.0226.oe1.aarch64.rpm"
],
"src": [
"kernel-4.19.90-2311.3.0.0226.oe1.src.rpm"
],
"x86_64": [
"kernel-devel-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"perf-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python3-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-tools-devel-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"perf-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-debugsource-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-tools-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"bpftool-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python2-perf-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python2-perf-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"bpftool-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"python3-perf-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-tools-debuginfo-4.19.90-2311.3.0.0226.oe1.x86_64.rpm",
"kernel-source-4.19.90-2311.3.0.0226.oe1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:20.03-LTS-SP3",
"name": "kernel",
"purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP3"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.19.90-2311.3.0.0226.oe1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)\r\n\r\nRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)\r\n\r\nA race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\r\n\r\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\r\n\r\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.\r\n\r\n(CVE-2023-4623)",
"id": "OESA-2023-1842",
"modified": "2026-08-06T11:06:17Z",
"published": "2023-11-17T11:06:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1842"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45884"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3327"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39198"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4623"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "kernel security update",
"upstream": [
"CVE-2022-45884",
"CVE-2023-3327",
"CVE-2023-39198",
"CVE-2023-4623"
]
}
OESA-2023-1843 (CVE-2022-45884)
Vulnerability from osv_openeuler – Published: 2023-11-17 11:06 – Updated: 2026-08-06 11:06 – Source websiteThe Linux Kernel, the operating system core itself.
Security Fix(es):
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
(CVE-2023-4623)
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.
We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
(CVE-2023-5197)
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"python3-perf-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-tools-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"perf-debuginfo-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"python3-perf-debuginfo-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"bpftool-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-source-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"perf-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-devel-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-debugsource-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-tools-debuginfo-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-debuginfo-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-tools-devel-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"bpftool-debuginfo-5.10.0-60.117.0.144.oe2203.aarch64.rpm",
"kernel-headers-5.10.0-60.117.0.144.oe2203.aarch64.rpm"
],
"src": [
"kernel-5.10.0-60.117.0.144.oe2203.src.rpm"
],
"x86_64": [
"python3-perf-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"bpftool-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-debuginfo-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"perf-debuginfo-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-headers-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-tools-debuginfo-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-tools-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-tools-devel-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-source-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-devel-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"bpftool-debuginfo-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"perf-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"python3-perf-debuginfo-5.10.0-60.117.0.144.oe2203.x86_64.rpm",
"kernel-debugsource-5.10.0-60.117.0.144.oe2203.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:22.03-LTS",
"name": "kernel",
"purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.10.0-60.117.0.144.oe2203"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)\r\n\r\nRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)\r\n\r\nA race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\r\n\r\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\r\n\r\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.\r\n\r\n(CVE-2023-4623)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\r\n\r\nAddition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.\r\n\r\nWe recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.\r\n\r\n(CVE-2023-5197)",
"id": "OESA-2023-1843",
"modified": "2026-08-06T11:06:17Z",
"published": "2023-11-17T11:06:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1843"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45884"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3327"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39198"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4623"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5197"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "kernel security update",
"upstream": [
"CVE-2022-45884",
"CVE-2023-3327",
"CVE-2023-39198",
"CVE-2023-4623",
"CVE-2023-5197"
]
}
OESA-2023-1844 (CVE-2022-45884)
Vulnerability from osv_openeuler – Published: 2023-11-17 11:06 – Updated: 2026-08-06 11:06 – Source websiteThe Linux Kernel, the operating system core itself.
Security Fix(es):
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
(CVE-2023-4623)
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.
We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
(CVE-2023-5197)
| URL | Type | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"python3-perf-debuginfo-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-tools-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-tools-debuginfo-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"perf-debuginfo-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-devel-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"python3-perf-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"bpftool-debuginfo-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"bpftool-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-debuginfo-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-tools-devel-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-source-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-debugsource-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"kernel-headers-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm",
"perf-5.10.0-136.55.0.134.oe2203sp1.aarch64.rpm"
],
"src": [
"kernel-5.10.0-136.55.0.134.oe2203sp1.src.rpm"
],
"x86_64": [
"kernel-source-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"bpftool-debuginfo-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-devel-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-headers-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"python3-perf-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"python3-perf-debuginfo-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-debuginfo-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-tools-debuginfo-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"bpftool-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-debugsource-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-tools-devel-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"perf-debuginfo-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"perf-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm",
"kernel-tools-5.10.0-136.55.0.134.oe2203sp1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:22.03-LTS-SP1",
"name": "kernel",
"purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS-SP1"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.10.0-136.55.0.134.oe2203sp1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)\r\n\r\nRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)\r\n\r\nA race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\r\n\r\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\r\n\r\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.\r\n\r\n(CVE-2023-4623)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\r\n\r\nAddition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.\r\n\r\nWe recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.\r\n\r\n(CVE-2023-5197)",
"id": "OESA-2023-1844",
"modified": "2026-08-06T11:06:17Z",
"published": "2023-11-17T11:06:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1844"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45884"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3327"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39198"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4623"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5197"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "kernel security update",
"upstream": [
"CVE-2022-45884",
"CVE-2023-3327",
"CVE-2023-39198",
"CVE-2023-4623",
"CVE-2023-5197"
]
}
OESA-2023-1845 (CVE-2022-45884)
Vulnerability from osv_openeuler – Published: 2023-11-17 11:06 – Updated: 2026-08-06 11:06 – Source websiteThe Linux Kernel, the operating system core itself.
Security Fix(es):
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
(CVE-2023-4623)
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.
We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
(CVE-2023-5197)
| URL | Type | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"bpftool-debuginfo-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"perf-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"bpftool-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"python3-perf-debuginfo-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-devel-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"python3-perf-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-tools-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-debuginfo-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-tools-debuginfo-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-source-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-tools-devel-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-debugsource-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"kernel-headers-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm",
"perf-debuginfo-5.10.0-153.33.0.110.oe2203sp2.aarch64.rpm"
],
"src": [
"kernel-5.10.0-153.33.0.110.oe2203sp2.src.rpm"
],
"x86_64": [
"bpftool-debuginfo-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-debugsource-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-headers-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"perf-debuginfo-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-tools-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"bpftool-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-debuginfo-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-tools-devel-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"python3-perf-debuginfo-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-devel-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-tools-debuginfo-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-source-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"python3-perf-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"kernel-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm",
"perf-5.10.0-153.33.0.110.oe2203sp2.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:22.03-LTS-SP2",
"name": "kernel",
"purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS-SP2"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.10.0-153.33.0.110.oe2203sp2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.(CVE-2022-45884)\r\n\r\nRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2023-3327)\r\n\r\nA race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.(CVE-2023-39198)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\r\n\r\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\r\n\r\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.\r\n\r\n(CVE-2023-4623)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\r\n\r\nAddition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.\r\n\r\nWe recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.\r\n\r\n(CVE-2023-5197)",
"id": "OESA-2023-1845",
"modified": "2026-08-06T11:06:17Z",
"published": "2023-11-17T11:06:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1845"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45884"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3327"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39198"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4623"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5197"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "kernel security update",
"upstream": [
"CVE-2022-45884",
"CVE-2023-3327",
"CVE-2023-39198",
"CVE-2023-4623",
"CVE-2023-5197"
]
}
WID-SEC-W-2023-1511
Vulnerability from csaf_certbund - Published: 2023-06-19 22:00 - Updated: 2023-06-19 22:00Es existiert eine Schwachstelle im Linux Kernel. Eine Race Condition im Philips SAA7134-Treiber kann unter bestimmten Umständen zu einem Use-after-free-Problem führen. Ein privilegierter Angreifer kann diese Schwachstelle ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.