Vulnerability-Lookup

RHSA-2025:21112

Vulnerability from csaf_redhat - Published: 2025-11-12 11:50 - Updated: 2026-08-04 19:20

Summary

Red Hat Security Advisory: kernel security update

Severity

Moderate

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087) * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571) * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566) * kernel: vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718) * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702) * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817) * kernel: pstore/ram: Check start of empty przs during init (CVE-2023-53331) * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367) * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373) * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849) * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841) * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-50087

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the probe succeeds. If it is not taken care, then it could result use-after-free as the value is exported via get_scpi_ops() and could refer to a memory allocated via devm_kzalloc() but freed when the probe fails.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 303 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-64k-debug-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-64k-debug-devel-matched-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-64k-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-64k-devel-matched-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-common-ppc64le-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-common-s390x-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-matched-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-matched-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-matched-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-devel-matched-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-doc-0:5.14.0-611.7.1.el9_7.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-rt-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-rt-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-zfcpdump-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-zfcpdump-devel-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:kernel-zfcpdump-devel-matched-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rtla-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rtla-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rtla-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rtla-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rv-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rv-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rv-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.7.0.Z.MAIN:rv-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-0:5.14.0-611.7.1.el9_7.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-debug-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-debug-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-debug-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-debug-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-debug-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-64k-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-abi-stablelists-0:5.14.0-611.7.1.el9_7.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-core-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-core-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-core-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-core-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-modules-extra-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debug-uki-virt-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-common-ppc64le-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-common-s390x-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-core-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-core-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-extra-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-extra-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-modules-extra-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-rt-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-rt-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-libs-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-libs-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-tools-libs-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-uki-virt-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-uki-virt-addons-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-zfcpdump-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-zfcpdump-core-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-zfcpdump-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-zfcpdump-modules-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-zfcpdump-modules-core-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:kernel-zfcpdump-modules-extra-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-common-ppc64le-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-common-s390x-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-rt-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-rt-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-tools-libs-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-tools-libs-devel-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-tools-libs-devel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:kernel-zfcpdump-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debug-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debug-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debug-devel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debug-modules-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debug-modules-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-devel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-modules-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-modules-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-rt-modules-extra-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debug-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debug-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debug-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debug-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debug-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debug-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-64k-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-devel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-modules-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-modules-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debug-modules-extra-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-devel-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-devel-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-modules-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-modules-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-modules-core-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-modules-core-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-modules-extra-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-rt-modules-extra-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:libperf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.7.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-611.7.1.el9_7.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-50367

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_metadata_file_inode() returns true and nilfs_free_inode() wrongly calls nilfs_mdt_destroy(), which frees the uninitialized inode->i_private and leads to crashes(e.g., UAF/GPF). Fix this by moving security_inode_alloc just prior to this_cpu_inc(nr_inodes)

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2023-53331

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ (persistent ram zone) during initialization leads to damage to the availability and integrity of the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-129 - Improper Validation of Array Index

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2023-53373

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of seqiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2023-53494

A flaw use after free in the Linux kernel XTS (XOR Encrypt XOR with ciphertext stealing) crypto Kernel module was found in the way privileges user triggers XTS crypto API in specific way. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-664 - Improper Control of a Resource Through its Lifetime

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-38566

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tls_alert_recv() due to its assumption it can read data from the msg iterator's kvec.. kTLS implementation splits TLS non-data record payload between the control message buffer (which includes the type such as TLS aler or TLS cipher change) and the rest of the payload (say TLS alert's level/description) which goes into the msg payload buffer. This patch proposes to rework how control messages are setup and used by sock_recvmsg(). If no control message structure is setup, kTLS layer will read and process TLS data record types. As soon as it encounters a TLS control message, it would return an error. At that point, NFS can setup a kvec backed msg buffer and read in the control message such as a TLS alert. Msg iterator can advance the kvec pointer as a part of the copy process thus we need to revert the iterator before calling into the tls_alert_recv.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-38571

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is valid data in the msghdr's iterator's kvec. Instead, this patch proposes the rework how control messages are setup and used by sock_recvmsg(). If no control message structure is setup, kTLS layer will read and process TLS data record types. As soon as it encounters a TLS control message, it would return an error. At that point, NFS can setup a kvec backed control buffer and read in the control message such as a TLS alert. Scott found that a msg iterator can advance the kvec pointer as a part of the copy process thus we need to revert the iterator before calling into the tls_alert_recv.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-39702

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-208 - Observable Timing Discrepancy

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-39718

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately, virtio_vsock_skb_rx_put() uses the length from the packet header as the length argument to skb_put(), potentially resulting in SKB overflow if the host has gone wonky. Validate the length as advertised by the packet header before calling virtio_vsock_skb_rx_put().

7.6 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-39817

A slab-out-of-bounds exists in the linux kernel in efivarfs_d_compare, such that the issue can be triggered by parallel lookups using an invalid filename due to an incorrect memcmp function.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-39841

A use-after-free vulnerability exists in the linux kernel such that the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the context pointer under the lock.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-39849

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.

7.5 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

CVE-2025-40300

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already protect kernel/KVM from a malicious guest. Userspace can additionally be protected by flushing the branch predictors after a VMexit. Since it is the userspace that consumes the poisoned branch predictors, conditionally issue an IBPB after a VMexit and before returning to userspace. Workloads that frequently switch between hypervisor and userspace will incur the most overhead from the new IBPB. This new IBPB is not integrated with the existing IBPB sites. For instance, a task can use the existing speculation control prctl() to get an IBPB at context switch time. With this implementation, the IBPB is doubled up: one at context switch and another before running userspace. The intent is to integrate and optimize these cases post-embargo. [ dhansen: elaborate on suboptimal IBPB solution ]

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-402 - Transmission of Private Resources into a New Sphere ('Resource Leak')

Affected products

Fixed 303 products, the same list as for CVE-2022-50087

Threats

Impact Moderate

References

81 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:21112	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2373539	external
https://bugzilla.redhat.com/show_bug.cgi?id=2389480	external
https://bugzilla.redhat.com/show_bug.cgi?id=2389487	external
https://bugzilla.redhat.com/show_bug.cgi?id=2393507	external
https://bugzilla.redhat.com/show_bug.cgi?id=2393533	external
https://bugzilla.redhat.com/show_bug.cgi?id=2394627	external
https://bugzilla.redhat.com/show_bug.cgi?id=2395805	external
https://bugzilla.redhat.com/show_bug.cgi?id=2395880	external
https://bugzilla.redhat.com/show_bug.cgi?id=2396114	external
https://bugzilla.redhat.com/show_bug.cgi?id=2396379	external
https://bugzilla.redhat.com/show_bug.cgi?id=2396928	external
https://bugzilla.redhat.com/show_bug.cgi?id=2396944	external
https://bugzilla.redhat.com/show_bug.cgi?id=2400777	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-50087	self
https://bugzilla.redhat.com/show_bug.cgi?id=2373539	external
https://www.cve.org/CVERecord?id=CVE-2022-50087	external
https://nvd.nist.gov/vuln/detail/CVE-2022-50087	external
https://lore.kernel.org/linux-cve-announce/202506…	external
https://access.redhat.com/security/cve/CVE-2022-50367	self
https://bugzilla.redhat.com/show_bug.cgi?id=2396114	external
https://www.cve.org/CVERecord?id=CVE-2022-50367	external
https://nvd.nist.gov/vuln/detail/CVE-2022-50367	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2023-53331	self
https://bugzilla.redhat.com/show_bug.cgi?id=2395880	external
https://www.cve.org/CVERecord?id=CVE-2023-53331	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53331	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2023-53373	self
https://bugzilla.redhat.com/show_bug.cgi?id=2396379	external
https://www.cve.org/CVERecord?id=CVE-2023-53373	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53373	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2023-53494	self
https://bugzilla.redhat.com/show_bug.cgi?id=2400777	external
https://www.cve.org/CVERecord?id=CVE-2023-53494	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53494	external
https://lore.kernel.org/linux-cve-announce/202510…	external
https://access.redhat.com/security/cve/CVE-2025-38566	self
https://bugzilla.redhat.com/show_bug.cgi?id=2389487	external
https://www.cve.org/CVERecord?id=CVE-2025-38566	external
https://nvd.nist.gov/vuln/detail/CVE-2025-38566	external
https://lore.kernel.org/linux-cve-announce/202508…	external
https://access.redhat.com/security/cve/CVE-2025-38571	self
https://bugzilla.redhat.com/show_bug.cgi?id=2389480	external
https://www.cve.org/CVERecord?id=CVE-2025-38571	external
https://nvd.nist.gov/vuln/detail/CVE-2025-38571	external
https://lore.kernel.org/linux-cve-announce/202508…	external
https://access.redhat.com/security/cve/CVE-2025-39702	self
https://bugzilla.redhat.com/show_bug.cgi?id=2393533	external
https://www.cve.org/CVERecord?id=CVE-2025-39702	external
https://nvd.nist.gov/vuln/detail/CVE-2025-39702	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2025-39718	self
https://bugzilla.redhat.com/show_bug.cgi?id=2393507	external
https://www.cve.org/CVERecord?id=CVE-2025-39718	external
https://nvd.nist.gov/vuln/detail/CVE-2025-39718	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2025-39817	self
https://bugzilla.redhat.com/show_bug.cgi?id=2395805	external
https://www.cve.org/CVERecord?id=CVE-2025-39817	external
https://nvd.nist.gov/vuln/detail/CVE-2025-39817	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2025-39841	self
https://bugzilla.redhat.com/show_bug.cgi?id=2396944	external
https://www.cve.org/CVERecord?id=CVE-2025-39841	external
https://nvd.nist.gov/vuln/detail/CVE-2025-39841	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2025-39849	self
https://bugzilla.redhat.com/show_bug.cgi?id=2396928	external
https://www.cve.org/CVERecord?id=CVE-2025-39849	external
https://nvd.nist.gov/vuln/detail/CVE-2025-39849	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2025-40300	self
https://bugzilla.redhat.com/show_bug.cgi?id=2394627	external
https://www.cve.org/CVERecord?id=CVE-2025-40300	external
https://nvd.nist.gov/vuln/detail/CVE-2025-40300	external
https://lore.kernel.org/linux-cve-announce/202509…	external

JSON

To clipboard

Loading 1.5 MB of JSON…

BDU:2026-02517 (CVE-2023-53373)

Vulnerability from fstec – Published: 2026-03-04 – Updated: 2026-03-04 – View on bdu.fstec.ru Fixed

Title

Уязвимость функции seqiv_aead_encrypt_complete2() модуля crypto/seqiv.c криптографической подсистемы ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Summary

Уязвимость функции seqiv_aead_encrypt_complete2() модуля crypto/seqiv.c криптографической подсистемы ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Severity

6.0 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:S/C:C/I:C/A:C

7.0 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-119 - Выход операции за границы буфера в памяти
CWE-416 - Использование после освобождения

Aliases

CVE-2023-53373, RHSA-2025:17760, RHSA-2025:18297, RHSA-2025:18298, RHSA-2025:19104, RHSA-2025:19268, RHSA-2025:19492, RHSA-2025:21051, RHSA-2025:21063, RHSA-2025:21082, RHSA-2025:21083, RHSA-2025:21084, RHSA-2025:21112, RHSA-2025:21128, RHSA-2025:22752, RHSA-2025:23445

References

19 references

URL
https://www.cve.org/CVERecord?id=CVE-2023-53373
https://git.kernel.org/stable/c/cc4d0d4251748a8a68026938f4055d2ac47c5719
https://git.kernel.org/stable/c/1effbddaff60eeef8017c6dea1ee0ed970164d14
https://git.kernel.org/stable/c/63551e4b7cbcd9914258827699eb2cb6ed6e4a16
https://git.kernel.org/stable/c/ae849d2f48019ff9c104e32bf588ccbfb200e971
https://git.kernel.org/stable/c/36ec108b7bd7e280edb22de028467bd09d644620
https://git.kernel.org/stable/c/4d497e8b200a175094e0ac252ed878add39b8771
https://git.kernel.org/stable/c/9477db935eb690f697d9bcc4f608927841bc8b36
https://git.kernel.org/linus/32e62025e5e52fbe4812ef044759de7010b15dbc
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.308
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.276
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.235
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.173
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.99
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.16
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.3
https://access.redhat.com/security/cve/cve-2023-53373
https://security-tracker.debian.org/tracker/CVE-2023-53373
https://ubuntu.com/security/CVE-2023-53373

Impacted products

4 products from 4 vendors

Vendors

Canonical Ltd., Red Hat, Inc., Сообщество свободного программного обеспечения

Products

Ubuntu, Red Hat Enterprise Linux, Debian GNU/Linux, Linux

Versions

16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 8 (Red Hat Enterprise Linux), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), 8.2 Advanced Update Support (Red Hat Enterprise Linux), от 5.5 до 5.10.172 включительно (Linux), от 5.11 до 5.15.98 включительно (Linux), от 5.16 до 6.1.15 включительно (Linux), от 4.15 до 4.19.275 включительно (Linux), от 4.20 до 5.4.234 включительно (Linux), 8.4 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Telecommunications Update Service (Red Hat Enterprise Linux), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 7 Extended Lifecycle Support (Red Hat Enterprise Linux), 9.4 Extended Update Support (Red Hat Enterprise Linux), от 6.2 до 6.2.2 включительно (Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.4 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), от 2.6.25 до 4.14.307 включительно (Linux)

Product types

Operating system

Platforms

Canonical Ltd. Ubuntu 16.04 LTS, Canonical Ltd. Ubuntu 18.04 LTS, Red Hat, Inc. Red Hat Enterprise Linux 8, Canonical Ltd. Ubuntu 20.04 LTS, Сообщество свободного программного обеспечения Debian GNU/Linux 11, Canonical Ltd. Ubuntu 22.04 LTS, Inc. Red Hat Enterprise Linux 9, Inc. Red Hat Enterprise Linux 8.2 Advanced Update Support, Сообщество свободного программного обеспечения Linux от 5.5 до 5.10.172 включительно, Сообщество свободного программного обеспечения Linux от 5.11 до 5.15.98 включительно, Сообщество свободного программного обеспечения Linux от 5.16 до 6.1.15 включительно, Сообщество свободного программного обеспечения Linux от 4.15 до 4.19.275 включительно, Сообщество свободного программного обеспечения Linux от 4.20 до 5.4.234 включительно, Inc. Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Inc. Red Hat Enterprise Linux 7 Extended Lifecycle Support, Inc. Red Hat Enterprise Linux 9.4 Extended Update Support, Сообщество свободного программного обеспечения Linux от 6.2 до 6.2.2 включительно, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Сообщество свободного программного обеспечения Linux от 2.6.25 до 4.14.307 включительно

Mitigations

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd., Red Hat, Inc., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 8 (Red Hat Enterprise Linux), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), 8.2 Advanced Update Support (Red Hat Enterprise Linux), \u043e\u0442 5.5 \u0434\u043e 5.10.172 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.11 \u0434\u043e 5.15.98 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.16 \u0434\u043e 6.1.15 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.15 \u0434\u043e 4.19.275 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.20 \u0434\u043e 5.4.234 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), 8.4 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Telecommunications Update Service (Red Hat Enterprise Linux), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 7 Extended Lifecycle Support (Red Hat Enterprise Linux), 9.4 Extended Update Support (Red Hat Enterprise Linux), \u043e\u0442 6.2 \u0434\u043e 6.2.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.4 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), \u043e\u0442 2.6.25 \u0434\u043e 4.14.307 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://git.kernel.org/stable/c/cc4d0d4251748a8a68026938f4055d2ac47c5719\nhttps://git.kernel.org/stable/c/1effbddaff60eeef8017c6dea1ee0ed970164d14\nhttps://git.kernel.org/stable/c/63551e4b7cbcd9914258827699eb2cb6ed6e4a16\nhttps://git.kernel.org/stable/c/ae849d2f48019ff9c104e32bf588ccbfb200e971\nhttps://git.kernel.org/stable/c/36ec108b7bd7e280edb22de028467bd09d644620\nhttps://git.kernel.org/stable/c/4d497e8b200a175094e0ac252ed878add39b8771\nhttps://git.kernel.org/stable/c/9477db935eb690f697d9bcc4f608927841bc8b36\nhttps://git.kernel.org/linus/32e62025e5e52fbe4812ef044759de7010b15dbc\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2023-53373\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2023-53373\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ubuntu:\nhttps://ubuntu.com/security/CVE-2023-53373",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "20.01.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "04.03.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "04.03.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-02517",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-53373, RHSA-2025:17760, RHSA-2025:18297, RHSA-2025:18298, RHSA-2025:19104, RHSA-2025:19268, RHSA-2025:19492, RHSA-2025:21051, RHSA-2025:21063, RHSA-2025:21082, RHSA-2025:21083, RHSA-2025:21084, RHSA-2025:21112, RHSA-2025:21128, RHSA-2025:22752, RHSA-2025:23445",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu, Red Hat Enterprise Linux, Debian GNU/Linux, Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Canonical Ltd. Ubuntu 16.04 LTS , Canonical Ltd. Ubuntu 18.04 LTS , Red Hat, Inc. Red Hat Enterprise Linux 8 , Canonical Ltd. Ubuntu 20.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , Canonical Ltd. Ubuntu 22.04 LTS , Red Hat, Inc. Red Hat Enterprise Linux 9 , Red Hat, Inc. Red Hat Enterprise Linux 8.2 Advanced Update Support , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.5 \u0434\u043e 5.10.172 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.11 \u0434\u043e 5.15.98 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.16 \u0434\u043e 6.1.15 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.15 \u0434\u043e 4.19.275 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.20 \u0434\u043e 5.4.234 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Red Hat, Inc. Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support , Red Hat, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Telecommunications Update Service , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support , Red Hat, Inc. Red Hat Enterprise Linux 7 Extended Lifecycle Support , Red Hat, Inc. Red Hat Enterprise Linux 9.4 Extended Update Support , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 6.2 \u0434\u043e 6.2.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 2.6.25 \u0434\u043e 4.14.307 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 seqiv_aead_encrypt_complete2() \u043c\u043e\u0434\u0443\u043b\u044f crypto/seqiv.c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119), \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (CWE-416)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 seqiv_aead_encrypt_complete2() \u043c\u043e\u0434\u0443\u043b\u044f crypto/seqiv.c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.cve.org/CVERecord?id=CVE-2023-53373\nhttps://git.kernel.org/stable/c/cc4d0d4251748a8a68026938f4055d2ac47c5719\nhttps://git.kernel.org/stable/c/1effbddaff60eeef8017c6dea1ee0ed970164d14\nhttps://git.kernel.org/stable/c/63551e4b7cbcd9914258827699eb2cb6ed6e4a16\nhttps://git.kernel.org/stable/c/ae849d2f48019ff9c104e32bf588ccbfb200e971\nhttps://git.kernel.org/stable/c/36ec108b7bd7e280edb22de028467bd09d644620\nhttps://git.kernel.org/stable/c/4d497e8b200a175094e0ac252ed878add39b8771\nhttps://git.kernel.org/stable/c/9477db935eb690f697d9bcc4f608927841bc8b36\nhttps://git.kernel.org/linus/32e62025e5e52fbe4812ef044759de7010b15dbc\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.308\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.276\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.235\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.173\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.99\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.16\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.3\nhttps://access.redhat.com/security/cve/cve-2023-53373\nhttps://security-tracker.debian.org/tracker/CVE-2023-53373\nhttps://ubuntu.com/security/CVE-2023-53373",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119, CWE-416",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7)"
}

BDU:2026-06009 (CVE-2023-53331)

Vulnerability from fstec – Published: 2026-04-29 – Updated: 2026-04-29 – View on bdu.fstec.ru Fixed

Title

Уязвимость функции persistent_ram_post_init() модуля fs/pstore/ram_core.c поддержки постоянного хранилища ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Summary

Уязвимость функции persistent_ram_post_init() модуля fs/pstore/ram_core.c поддержки постоянного хранилища ядра операционной системы Linux связана с некорректной инициализацией ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Severity

6.0 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:S/C:C/I:C/A:C

7.0 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-665 - Неверная инициализация

Aliases

CVE-2023-53331, RHSA-2025:19105, RHSA-2025:19886, RHSA-2025:21051, RHSA-2025:21091, RHSA-2025:21112, RHSA-2025:21128, RHSA-2025:21136

References

21 references

URL
https://www.cve.org/CVERecord?id=CVE-2023-53331
https://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8
https://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549
https://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed
https://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c
https://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d
https://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2
https://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615
https://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003
https://git.kernel.org/linus/fe8c3623ab06603eb760444a032d426542212021
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.326
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.295
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.257
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.195
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.132
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.53
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.16
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3
https://access.redhat.com/security/cve/cve-2023-53331
https://security-tracker.debian.org/tracker/CVE-2023-53331
https://ubuntu.com/security/CVE-2023-53331

Impacted products

5 products from 5 vendors

Vendors

Canonical Ltd., Сообщество свободного программного обеспечения, Red Hat, Inc., АО «СберТех»

Products

Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, Linux, Platform V SberLinux OS Server (запись в едином реестре российских программ №18785)

Versions

16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), от 6.2 до 6.4.15 включительно (Linux), от 5.11 до 5.15.131 включительно (Linux), от 5.16 до 6.1.52 включительно (Linux), от 5.5 до 5.10.194 включительно (Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.4 Extended Update Support (Red Hat Enterprise Linux), от 6.5 до 6.5.2 включительно (Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), от 4.4.172 до 4.5 (Linux), от 4.9.153 до 4.10 (Linux), от 4.14.96 до 4.14.325 включительно (Linux), от 4.19.18 до 4.19.294 включительно (Linux), от 4.20.5 до 5.4.256 включительно (Linux), до 9.2.0-fstec (Platform V SberLinux OS Server)

Product types

Operating system

Platforms

Canonical Ltd. Ubuntu 16.04 LTS, Canonical Ltd. Ubuntu 18.04 LTS, Canonical Ltd. Ubuntu 20.04 LTS, Сообщество свободного программного обеспечения Debian GNU/Linux 11, Сообщество свободного программного обеспечения Debian GNU/Linux 12, Canonical Ltd. Ubuntu 22.04 LTS, Red Hat, Inc. Red Hat Enterprise Linux 9, Сообщество свободного программного обеспечения Linux от 6.2 до 6.4.15 включительно, Сообщество свободного программного обеспечения Linux от 5.11 до 5.15.131 включительно, Сообщество свободного программного обеспечения Linux от 5.16 до 6.1.52 включительно, Сообщество свободного программного обеспечения Linux от 5.5 до 5.10.194 включительно, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 9.4 Extended Update Support, Сообщество свободного программного обеспечения Linux от 6.5 до 6.5.2 включительно, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Сообщество свободного программного обеспечения Linux от 4.4.172 до 4.5, Сообщество свободного программного обеспечения Linux от 4.9.153 до 4.10, Сообщество свободного программного обеспечения Linux от 4.14.96 до 4.14.325 включительно, Сообщество свободного программного обеспечения Linux от 4.19.18 до 4.19.294 включительно, Сообщество свободного программного обеспечения Linux от 4.20.5 до 5.4.256 включительно, АО «СберТех» Platform V SberLinux OS Server до 9.2.0-fstec (запись в едином реестре российских программ №18785)

Mitigations

В условиях отсутствия обновлений безопасности от производителя рекомендуется придерживаться "Рекомендаций по безопасной настройке операционных систем LINUX", изложенных в методическом документе ФСТЭК России, утверждённом 25 декабря 2022 года. Использование рекомендаций: Для Linux: https://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8 https://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549 https://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed https://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c https://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d https://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2 https://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615 https://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003 https://git.kernel.org/linus/fe8c3623ab06603eb760444a032d426542212021 Для программных продуктов Red Hat Inc.: https://access.redhat.com/security/cve/cve-2023-53331 Для программных продуктов Debian GNU/Linux: https://security-tracker.debian.org/tracker/CVE-2023-53331 Для программных продуктов Ubuntu: https://ubuntu.com/security/CVE-2023-53331 Для Platform V SberLinux OS Server: Обновление операционной системы до версии 9.2.0-fstec или выше

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Red Hat, Inc., \u0410\u041e \u00ab\u0421\u0431\u0435\u0440\u0422\u0435\u0445\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), \u043e\u0442 6.2 \u0434\u043e 6.4.15 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.11 \u0434\u043e 5.15.131 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.16 \u0434\u043e 6.1.52 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.5 \u0434\u043e 5.10.194 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.4 Extended Update Support (Red Hat Enterprise Linux), \u043e\u0442 6.5 \u0434\u043e 6.5.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), \u043e\u0442 4.4.172 \u0434\u043e 4.5 (Linux), \u043e\u0442 4.9.153 \u0434\u043e 4.10 (Linux), \u043e\u0442 4.14.96 \u0434\u043e 4.14.325 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.19.18 \u0434\u043e 4.19.294 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.20.5 \u0434\u043e 5.4.256 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u0434\u043e 9.2.0-fstec (Platform V SberLinux OS Server)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8\nhttps://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549\nhttps://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed\nhttps://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c\nhttps://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d\nhttps://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2\nhttps://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615\nhttps://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003\nhttps://git.kernel.org/linus/fe8c3623ab06603eb760444a032d426542212021\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2023-53331\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2023-53331\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ubuntu:\nhttps://ubuntu.com/security/CVE-2023-53331\n\n\u0414\u043b\u044f Platform V SberLinux OS Server:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 9.2.0-fstec \u0438\u043b\u0438 \u0432\u044b\u0448\u0435",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.08.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "29.04.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "29.04.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-06009",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-53331, RHSA-2025:19105, RHSA-2025:19886, RHSA-2025:21051, RHSA-2025:21091, RHSA-2025:21112, RHSA-2025:21128, RHSA-2025:21136",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, Linux, Platform V SberLinux OS Server (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211618785)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Canonical Ltd. Ubuntu 16.04 LTS , Canonical Ltd. Ubuntu 18.04 LTS , Canonical Ltd. Ubuntu 20.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 12 , Canonical Ltd. Ubuntu 22.04 LTS , Red Hat, Inc. Red Hat Enterprise Linux 9 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 6.2 \u0434\u043e 6.4.15 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.11 \u0434\u043e 5.15.131 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.16 \u0434\u043e 6.1.52 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.5 \u0434\u043e 5.10.194 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Red Hat, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 9.4 Extended Update Support , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 6.5 \u0434\u043e 6.5.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Red Hat, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.4.172 \u0434\u043e 4.5 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.9.153 \u0434\u043e 4.10 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.14.96 \u0434\u043e 4.14.325 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.19.18 \u0434\u043e 4.19.294 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.20.5 \u0434\u043e 5.4.256 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0410\u041e \u00ab\u0421\u0431\u0435\u0440\u0422\u0435\u0445\u00bb Platform V SberLinux OS Server \u0434\u043e 9.2.0-fstec  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211618785)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 persistent_ram_post_init() \u043c\u043e\u0434\u0443\u043b\u044f fs/pstore/ram_core.c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0432\u0435\u0440\u043d\u0430\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f (CWE-665)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 persistent_ram_post_init() \u043c\u043e\u0434\u0443\u043b\u044f fs/pstore/ram_core.c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0435\u0441\u0443\u0440\u0441\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.cve.org/CVERecord?id=CVE-2023-53331\nhttps://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8\nhttps://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549\nhttps://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed\nhttps://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c\nhttps://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d\nhttps://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2\nhttps://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615\nhttps://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003\nhttps://git.kernel.org/linus/fe8c3623ab06603eb760444a032d426542212021\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.326\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.295\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.257\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.195\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.132\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.53\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.16\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3\nhttps://access.redhat.com/security/cve/cve-2023-53331\nhttps://security-tracker.debian.org/tracker/CVE-2023-53331\nhttps://ubuntu.com/security/CVE-2023-53331",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-665",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7)"
}

CVE-2022-50087 (GCVE-0-2022-50087)

Vulnerability from cvelistv5 – Published: 2025-06-18 11:02 – Updated: 2026-08-05 08:57

Title

firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

Summary

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-10 20:41 UTC

Assigner

Linux mitre root

References

7 references

URL	Tags
https://git.kernel.org/stable/c/5aa558232edc30468…
https://git.kernel.org/stable/c/18048cba444a7c41d…
https://git.kernel.org/stable/c/08272646cd7c31064…
https://git.kernel.org/stable/c/0c29e149b6bb49877…
https://git.kernel.org/stable/c/87c4896d5dd7fd992…
https://git.kernel.org/stable/c/4f2d7b46d6b53c07f…
https://git.kernel.org/stable/c/689640efc0a2c4e07…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 8cb7cf56c9fe5412de238465b27ef35b4d2801aa , < 5aa558232edc30468d1f35108826dd5b3ffe978f (git) Affected: 8cb7cf56c9fe5412de238465b27ef35b4d2801aa , < 18048cba444a7c41dbf42c180d6b46606fc24c51 (git) Affected: 8cb7cf56c9fe5412de238465b27ef35b4d2801aa , < 08272646cd7c310642c39b7f54348fddd7987643 (git) Affected: 8cb7cf56c9fe5412de238465b27ef35b4d2801aa , < 0c29e149b6bb498778ed8a1c9597b51acfba7856 (git) Affected: 8cb7cf56c9fe5412de238465b27ef35b4d2801aa , < 87c4896d5dd7fd9927c814cf3c6289f41de3b562 (git) Affected: 8cb7cf56c9fe5412de238465b27ef35b4d2801aa , < 4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87 (git) Affected: 8cb7cf56c9fe5412de238465b27ef35b4d2801aa , < 689640efc0a2c4e07e6f88affe6d42cd40cc3f85 (git)
Linux	Linux	Affected: 4.4 Unaffected: 0 , < 4.4 (semver) Unaffected: 4.19.256 , ≤ 4.19.* (semver) Unaffected: 5.4.211 , ≤ 5.4.* (semver) Unaffected: 5.10.137 , ≤ 5.10.* (semver) Unaffected: 5.15.61 , ≤ 5.15.* (semver) Unaffected: 5.18.18 , ≤ 5.18.* (semver) Unaffected: 5.19.2 , ≤ 5.19.* (semver) Unaffected: 6.0 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-50087",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T20:41:34.847637Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T18:44:13.909Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/arm_scpi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5aa558232edc30468d1f35108826dd5b3ffe978f",
              "status": "affected",
              "version": "8cb7cf56c9fe5412de238465b27ef35b4d2801aa",
              "versionType": "git"
            },
            {
              "lessThan": "18048cba444a7c41dbf42c180d6b46606fc24c51",
              "status": "affected",
              "version": "8cb7cf56c9fe5412de238465b27ef35b4d2801aa",
              "versionType": "git"
            },
            {
              "lessThan": "08272646cd7c310642c39b7f54348fddd7987643",
              "status": "affected",
              "version": "8cb7cf56c9fe5412de238465b27ef35b4d2801aa",
              "versionType": "git"
            },
            {
              "lessThan": "0c29e149b6bb498778ed8a1c9597b51acfba7856",
              "status": "affected",
              "version": "8cb7cf56c9fe5412de238465b27ef35b4d2801aa",
              "versionType": "git"
            },
            {
              "lessThan": "87c4896d5dd7fd9927c814cf3c6289f41de3b562",
              "status": "affected",
              "version": "8cb7cf56c9fe5412de238465b27ef35b4d2801aa",
              "versionType": "git"
            },
            {
              "lessThan": "4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87",
              "status": "affected",
              "version": "8cb7cf56c9fe5412de238465b27ef35b4d2801aa",
              "versionType": "git"
            },
            {
              "lessThan": "689640efc0a2c4e07e6f88affe6d42cd40cc3f85",
              "status": "affected",
              "version": "8cb7cf56c9fe5412de238465b27ef35b4d2801aa",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/arm_scpi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "lessThan": "4.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.256",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.137",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.18",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.256",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.211",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.137",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.61",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.18",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.2",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails\n\nWhen scpi probe fails, at any point, we need to ensure that the scpi_info\nis not set and will remain NULL until the probe succeeds. If it is not\ntaken care, then it could result use-after-free as the value is exported\nvia get_scpi_ops() and could refer to a memory allocated via devm_kzalloc()\nbut freed when the probe fails."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is in the ARM SCPI platform firmware driver (mailbox/shared-memory to the on-SoC SCP), reached during local driver probe and consumer deferred probes (scpi-hwmon/clk/cpufreq/pm-domain), not via network or adjacent protocols.\nAC:L - Any probe failure after early assignment of global scpi_info (including common -EPROBE_DEFER when the mailbox is not ready, or SCP firmware/capability failure) deterministically leaves a dangling pointer that get_scpi_ops() consumers then use; the attacker does not need a hard-to-influence race.\nPR:L - The UAF is hit from in-kernel deferred probe of SCPI consumers without CAP_SYS_ADMIN/sysfs bind, so a normal local unprivileged user context on an affected ARM SCPI system is sufficient for the highest-severity exploitation model (heap spray against the freed scpi_drvinfo).\nUI:N - No victim action is required; probe failure and subsequent get_scpi_ops() use occur automatically during boot/deferred probing.\nS:U - Impact remains within the kernel\u2019s security authority (local privilege escalation/DoS via kernel UAF); it does not cross a VM, IOMMU, or other separate security boundary.\nC:H - This is a use-after-free of scpi_drvinfo exported through get_scpi_ops(); with heap reuse the attacker can control the returned scpi_ops and adjacent state, enabling arbitrary kernel reads.\nI:H - UAF of the ops/channel state enables forged function pointers and writes through SCPI ops (clocks, DVFS, power, sensors), so integrity impact includes control-flow hijacking and arbitrary modification.\nA:H - The reported crash is a kernel oops/NULL instruction abort in scpi_hwmon_probe via the dangling scpi_info, and UAFs generally cause panics even when not fully exploited."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:57:21.727Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f"
        },
        {
          "url": "https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51"
        },
        {
          "url": "https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643"
        },
        {
          "url": "https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856"
        },
        {
          "url": "https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562"
        },
        {
          "url": "https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87"
        },
        {
          "url": "https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85"
        }
      ],
      "title": "firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50087",
    "datePublished": "2025-06-18T11:02:28.079Z",
    "dateReserved": "2025-06-18T10:57:27.410Z",
    "dateUpdated": "2026-08-05T08:57:21.727Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-50367 (GCVE-0-2022-50367)

Vulnerability from cvelistv5 – Published: 2025-09-17 14:56 – Updated: 2026-08-05 08:58

Title

fs: fix UAF/GPF bug in nilfs_mdt_destroy

Summary

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-14 18:35 UTC

CWE

CWE-416 - Use After Free

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/d1ff475d7c83289d0…
https://git.kernel.org/stable/c/c0aa76b0f17f59dd9…
https://git.kernel.org/stable/c/ec2aab115eb38ac49…
https://git.kernel.org/stable/c/70e4f70d54e0225f9…
https://git.kernel.org/stable/c/1e555c3ed1fce4b27…
https://git.kernel.org/stable/c/64b79e632869ad3ef…
https://git.kernel.org/stable/c/81de80330fa6907ae…
https://git.kernel.org/stable/c/2a96b532098284ecf…
https://git.kernel.org/stable/c/2e488f13755ffbb60…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < d1ff475d7c83289d0a7faef346ea3bbf90818bad (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < c0aa76b0f17f59dd9c9d3463550a2986a1d592e4 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < ec2aab115eb38ac4992ea2fcc2a02fbe7af5cf48 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 70e4f70d54e0225f91814e8610477d65f33cefe4 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 1e555c3ed1fce4b278aaebe18a64a934cece57d8 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 64b79e632869ad3ef6c098a4731d559381da1115 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 81de80330fa6907aec32eb54c5619059e6e36452 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 2a96b532098284ecf8e4849b8b9e5fc7a28bdee9 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 2e488f13755ffbb60f307e991b27024716a33b29 (git)
Linux	Linux	Affected: 2.6.12 Unaffected: 0 , < 2.6.12 (semver) Unaffected: 4.9.331 , ≤ 4.9.* (semver) Unaffected: 4.14.296 , ≤ 4.14.* (semver) Unaffected: 4.19.262 , ≤ 4.19.* (semver) Unaffected: 5.4.218 , ≤ 5.4.* (semver) Unaffected: 5.10.148 , ≤ 5.10.* (semver) Unaffected: 5.15.73 , ≤ 5.15.* (semver) Unaffected: 5.19.15 , ≤ 5.19.* (semver) Unaffected: 6.0.1 , ≤ 6.0.* (semver) Unaffected: 6.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-50367",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:35:10.102018Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T18:42:59.212Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "d1ff475d7c83289d0a7faef346ea3bbf90818bad",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "c0aa76b0f17f59dd9c9d3463550a2986a1d592e4",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "ec2aab115eb38ac4992ea2fcc2a02fbe7af5cf48",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "70e4f70d54e0225f91814e8610477d65f33cefe4",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "1e555c3ed1fce4b278aaebe18a64a934cece57d8",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "64b79e632869ad3ef6c098a4731d559381da1115",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "81de80330fa6907aec32eb54c5619059e6e36452",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "2a96b532098284ecf8e4849b8b9e5fc7a28bdee9",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "2e488f13755ffbb60f307e991b27024716a33b29",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.12"
            },
            {
              "lessThan": "2.6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.331",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.296",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.262",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.218",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.73",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.331",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.296",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.262",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.218",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.148",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.73",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.15",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.1",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: fix UAF/GPF bug in nilfs_mdt_destroy\n\nIn alloc_inode, inode_init_always() could return -ENOMEM if\nsecurity_inode_alloc() fails, which causes inode-\u003ei_private\nuninitialized. Then nilfs_is_metadata_file_inode() returns\ntrue and nilfs_free_inode() wrongly calls nilfs_mdt_destroy(),\nwhich frees the uninitialized inode-\u003ei_private\nand leads to crashes(e.g., UAF/GPF).\n\nFix this by moving security_inode_alloc just prior to\nthis_cpu_inc(nr_inodes)"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached via local VFS inode allocation on a nilfs2 mount (creat/mkdir/etc. \u2192 new_inode \u2192 alloc_inode \u2192 inode_init_always failure \u2192 nilfs_free_inode), not via network packet processing.\nAC:L - An attacker who can allocate nilfs2 inodes can induce GFP_NOFS LSM blob allocation failures under memory pressure (e.g., memcg limits) and recycle slab objects previously used as metadata inodes, reliably driving the uninitialized-i_private free path.\nPR:L - On a system where nilfs2 is already mounted with unprivileged write access (a realistic embedded/NAS deployment), a normal local user can create files and hit the vulnerable alloc/free path without CAP_SYS_ADMIN.\nUI:N - No separate victim action is required; the attacker triggers the flaw themselves by creating inodes on an accessible nilfs2 filesystem under memory pressure.\nS:U - Impact is confined to the local kernel/host authority (standard kernel memory corruption / privilege escalation); it does not cross a VM, IOMMU, or other security boundary.\nC:H - nilfs_mdt_destroy kfree\u0027s a stale/dangling i_private pointer (use-after-free / double-free), which can be turned into arbitrary kernel read primitives via heap manipulation.\nI:H - The same UAF/double-free of heap metadata is exploitable for arbitrary kernel writes and control-flow hijacking, enabling full integrity compromise.\nA:H - Freeing an uninitialized or dangling i_private causes kernel GPF/oops/panic even without full exploitation, so availability impact is high."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:58:26.099Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/d1ff475d7c83289d0a7faef346ea3bbf90818bad"
        },
        {
          "url": "https://git.kernel.org/stable/c/c0aa76b0f17f59dd9c9d3463550a2986a1d592e4"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec2aab115eb38ac4992ea2fcc2a02fbe7af5cf48"
        },
        {
          "url": "https://git.kernel.org/stable/c/70e4f70d54e0225f91814e8610477d65f33cefe4"
        },
        {
          "url": "https://git.kernel.org/stable/c/1e555c3ed1fce4b278aaebe18a64a934cece57d8"
        },
        {
          "url": "https://git.kernel.org/stable/c/64b79e632869ad3ef6c098a4731d559381da1115"
        },
        {
          "url": "https://git.kernel.org/stable/c/81de80330fa6907aec32eb54c5619059e6e36452"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a96b532098284ecf8e4849b8b9e5fc7a28bdee9"
        },
        {
          "url": "https://git.kernel.org/stable/c/2e488f13755ffbb60f307e991b27024716a33b29"
        }
      ],
      "title": "fs: fix UAF/GPF bug in nilfs_mdt_destroy",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50367",
    "datePublished": "2025-09-17T14:56:23.190Z",
    "dateReserved": "2025-09-17T14:53:06.995Z",
    "dateUpdated": "2026-08-05T08:58:26.099Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53331 (GCVE-0-2023-53331)

Vulnerability from cvelistv5 – Published: 2025-09-16 16:12 – Updated: 2026-08-05 09:13

Title

pstore/ram: Check start of empty przs during init

Summary

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that the buffer_size is zero (regardless of the buffer start position). This unchecked start value means it could be outside the bounds of the buffer, leading to future access panics when written to: sysdump_panic_event+0x3b4/0x5b8 atomic_notifier_call_chain+0x54/0x90 panic+0x1c8/0x42c die+0x29c/0x2a8 die_kernel_fault+0x68/0x78 __do_kernel_fault+0x1c4/0x1e0 do_bad_area+0x40/0x100 do_translation_fault+0x68/0x80 do_mem_abort+0x68/0xf8 el1_da+0x1c/0xc0 __raw_writeb+0x38/0x174 __memcpy_toio+0x40/0xac persistent_ram_update+0x44/0x12c persistent_ram_write+0x1a8/0x1b8 ramoops_pstore_write+0x198/0x1e8 pstore_console_write+0x94/0xe0 ... To avoid this, also check if the prz start is 0 during the initialization phase. If not, the next prz sanity check case will discover it (start > size) and zap the buffer back to a sane state. [kees: update commit log with backtrace and clarifications]

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-14 18:30 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/89312657337e6e03a…
https://git.kernel.org/stable/c/c807ccdd812d18985…
https://git.kernel.org/stable/c/e972231db29b5d1dc…
https://git.kernel.org/stable/c/dc2f60de9a7d3efd9…
https://git.kernel.org/stable/c/fedecaeef88899d94…
https://git.kernel.org/stable/c/e95d7a8a6edd14f8f…
https://git.kernel.org/stable/c/f77990358628b01bd…
https://git.kernel.org/stable/c/25fb4e3402d46f425…
https://git.kernel.org/stable/c/fe8c3623ab06603eb…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: e1e3a46706bd4037e8b7407dc660ae6e05b8ac56 , < 89312657337e6e03ad6e9ea1a462bd9c158c85c8 (git) Affected: 265242d82a3c6a8bd9120d06b4801f8d7ae9a346 , < c807ccdd812d18985860504b503899f3140a9549 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < e972231db29b5d1dccc13bf9d5ba55b6979a69ed (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < dc2f60de9a7d3efd982440117dab5579898d808c (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < fedecaeef88899d940b69368c996e8b3b0b8650d (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < e95d7a8a6edd14f8fab44c777dd7281db91f6ae2 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < f77990358628b01bdc03752126ff5f716ea37615 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < 25fb4e3402d46f425ec135ef6f09792a4c1b3003 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < fe8c3623ab06603eb760444a032d426542212021 (git) Affected: ec7f99261da9a20d63cbd273511a11a2efe698f2 (git) Affected: f250e4c562a3bd106575032666e9ef46f31231f8 (git) Affected: fffdbf586866e9500b53c9d4b061d3983720375a (git) Affected: 9e969ba431b46b1891c88cea36f722f3bfe8a180 (git) Affected: 4.14.96 , < 4.14.326 (semver) Affected: 4.19.18 , < 4.19.295 (semver) Affected: 3.18.133 , < 3.19 (semver) Affected: 4.4.172 , < 4.5 (semver) Affected: 4.9.153 , < 4.10 (semver) Affected: 4.20.5 , < 4.21 (semver)
Linux	Linux	Affected: 5.0 Unaffected: 0 , < 5.0 (semver) Unaffected: 4.14.326 , ≤ 4.14.* (semver) Unaffected: 4.19.295 , ≤ 4.19.* (semver) Unaffected: 5.4.257 , ≤ 5.4.* (semver) Unaffected: 5.10.195 , ≤ 5.10.* (semver) Unaffected: 5.15.132 , ≤ 5.15.* (semver) Unaffected: 6.1.53 , ≤ 6.1.* (semver) Unaffected: 6.4.16 , ≤ 6.4.* (semver) Unaffected: 6.5.3 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53331",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:30:13.040006Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T18:32:59.884Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/pstore/ram_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "89312657337e6e03ad6e9ea1a462bd9c158c85c8",
              "status": "affected",
              "version": "e1e3a46706bd4037e8b7407dc660ae6e05b8ac56",
              "versionType": "git"
            },
            {
              "lessThan": "c807ccdd812d18985860504b503899f3140a9549",
              "status": "affected",
              "version": "265242d82a3c6a8bd9120d06b4801f8d7ae9a346",
              "versionType": "git"
            },
            {
              "lessThan": "e972231db29b5d1dccc13bf9d5ba55b6979a69ed",
              "status": "affected",
              "version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
              "versionType": "git"
            },
            {
              "lessThan": "dc2f60de9a7d3efd982440117dab5579898d808c",
              "status": "affected",
              "version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
              "versionType": "git"
            },
            {
              "lessThan": "fedecaeef88899d940b69368c996e8b3b0b8650d",
              "status": "affected",
              "version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
              "versionType": "git"
            },
            {
              "lessThan": "e95d7a8a6edd14f8fab44c777dd7281db91f6ae2",
              "status": "affected",
              "version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
              "versionType": "git"
            },
            {
              "lessThan": "f77990358628b01bdc03752126ff5f716ea37615",
              "status": "affected",
              "version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
              "versionType": "git"
            },
            {
              "lessThan": "25fb4e3402d46f425ec135ef6f09792a4c1b3003",
              "status": "affected",
              "version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
              "versionType": "git"
            },
            {
              "lessThan": "fe8c3623ab06603eb760444a032d426542212021",
              "status": "affected",
              "version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ec7f99261da9a20d63cbd273511a11a2efe698f2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f250e4c562a3bd106575032666e9ef46f31231f8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fffdbf586866e9500b53c9d4b061d3983720375a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "9e969ba431b46b1891c88cea36f722f3bfe8a180",
              "versionType": "git"
            },
            {
              "lessThan": "4.14.326",
              "status": "affected",
              "version": "4.14.96",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.295",
              "status": "affected",
              "version": "4.19.18",
              "versionType": "semver"
            },
            {
              "lessThan": "3.19",
              "status": "affected",
              "version": "3.18.133",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.172",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.153",
              "versionType": "semver"
            },
            {
              "lessThan": "4.21",
              "status": "affected",
              "version": "4.20.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/pstore/ram_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.0"
            },
            {
              "lessThan": "5.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.326",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.295",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.326",
                  "versionStartIncluding": "4.14.96",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.295",
                  "versionStartIncluding": "4.19.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.257",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.195",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.132",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.53",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.16",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.3",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.18.133",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.172",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.153",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.20.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npstore/ram: Check start of empty przs during init\n\nAfter commit 30696378f68a (\"pstore/ram: Do not treat empty buffers as\nvalid\"), initialization would assume a prz was valid after seeing that\nthe buffer_size is zero (regardless of the buffer start position). This\nunchecked start value means it could be outside the bounds of the buffer,\nleading to future access panics when written to:\n\n sysdump_panic_event+0x3b4/0x5b8\n atomic_notifier_call_chain+0x54/0x90\n panic+0x1c8/0x42c\n die+0x29c/0x2a8\n die_kernel_fault+0x68/0x78\n __do_kernel_fault+0x1c4/0x1e0\n do_bad_area+0x40/0x100\n do_translation_fault+0x68/0x80\n do_mem_abort+0x68/0xf8\n el1_da+0x1c/0xc0\n __raw_writeb+0x38/0x174\n __memcpy_toio+0x40/0xac\n persistent_ram_update+0x44/0x12c\n persistent_ram_write+0x1a8/0x1b8\n ramoops_pstore_write+0x198/0x1e8\n pstore_console_write+0x94/0xe0\n ...\n\nTo avoid this, also check if the prz start is 0 during the initialization\nphase. If not, the next prz sanity check case will discover it (start \u003e\nsize) and zap the buffer back to a sane state.\n\n[kees: update commit log with backtrace and clarifications]"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is confined to local pstore/ramoops initialization and subsequent local writes (pstore console, `/dev/pmsg0` via `persistent_ram_write_user`, or other ramoops backends); there is no network or adjacent-radio entry point into `fs/pstore/ram_core.c`.\nAC:L - Once an empty-but-invalid prz header (valid sig, size 0, non-zero start) is present in persistent RAM\u2014observed in the field and retained across soft reboot on common Android/embedded ramoops deployments\u2014the next write deterministically performs an out-of-bounds update with no race or ASLR dependency; scored Low under the uncertainty/highest-severity rule.\nPR:L - In the highest-impact realistic deployment (Android/ChromeOS-style ramoops with pmsg enabled), an unprivileged local actor can trigger the write through `/dev/pmsg0` (kernel default 0220, often further relaxed on Android) or rely on automatic pstore console writes after boot, without needing real init-namespace root.\nUI:N - No victim action is required: after a vulnerable boot accept of the bad empty buffer, the kernel itself writes via the pstore console on printk/panic, or the attacker writes `/dev/pmsg0` directly.\nS:U - The out-of-bounds write corrupts addresses within the kernel\u2019s own ramoops mapping/security domain and does not cross a VM, IOMMU, or other separate authority boundary.\nC:H - This is an out-of-bounds write through `persistent_ram_update`/`_user` into memory past the logical buffer; per kernel scoring guidance such memory corruption is treated as enabling high confidentiality impact (information disclosure primitives), matching CWE-787 assessment of this CVE.\nI:H - The bug issues a attacker-influenced (pmsg) or kernel-sourced (console) out-of-bounds store via `memcpy_toio`/`copy_from_user` at a corrupted start offset, which is integrity-high memory corruption that can overwrite adjacent mapped persistent-RAM contents and is scored as exploitable for control-flow impact under the OOB-write rule.\nA:H - The demonstrated consequence is a kernel translation fault/oops during the out-of-bounds write (see the fix backtrace through `persistent_ram_write` \u2192 `__memcpy_toio`), which is a full availability loss."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:13:32.268Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8"
        },
        {
          "url": "https://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549"
        },
        {
          "url": "https://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c"
        },
        {
          "url": "https://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d"
        },
        {
          "url": "https://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2"
        },
        {
          "url": "https://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615"
        },
        {
          "url": "https://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003"
        },
        {
          "url": "https://git.kernel.org/stable/c/fe8c3623ab06603eb760444a032d426542212021"
        }
      ],
      "title": "pstore/ram: Check start of empty przs during init",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53331",
    "datePublished": "2025-09-16T16:12:06.788Z",
    "dateReserved": "2025-09-16T16:08:59.564Z",
    "dateUpdated": "2026-08-05T09:13:32.268Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53373 (GCVE-0-2023-53373)

Vulnerability from cvelistv5 – Published: 2025-09-18 13:33 – Updated: 2026-08-05 09:13

Title

crypto: seqiv - Handle EBUSY correctly

Summary

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-14 18:54 UTC

CWE

CWE-416 - Use After Free

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/cc4d0d4251748a8a6…
https://git.kernel.org/stable/c/1effbddaff60eeef8…
https://git.kernel.org/stable/c/63551e4b7cbcd9914…
https://git.kernel.org/stable/c/ae849d2f48019ff9c…
https://git.kernel.org/stable/c/36ec108b7bd7e280e…
https://git.kernel.org/stable/c/4d497e8b200a17509…
https://git.kernel.org/stable/c/9477db935eb690f69…
https://git.kernel.org/stable/c/32e62025e5e52fbe4…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < cc4d0d4251748a8a68026938f4055d2ac47c5719 (git) Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < 1effbddaff60eeef8017c6dea1ee0ed970164d14 (git) Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < 63551e4b7cbcd9914258827699eb2cb6ed6e4a16 (git) Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < ae849d2f48019ff9c104e32bf588ccbfb200e971 (git) Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < 36ec108b7bd7e280edb22de028467bd09d644620 (git) Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < 4d497e8b200a175094e0ac252ed878add39b8771 (git) Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < 9477db935eb690f697d9bcc4f608927841bc8b36 (git) Affected: 0a270321dbf948963aeb0e8382fe17d2c2eb3771 , < 32e62025e5e52fbe4812ef044759de7010b15dbc (git)
Linux	Linux	Affected: 2.6.25 Unaffected: 0 , < 2.6.25 (semver) Unaffected: 4.14.308 , ≤ 4.14.* (semver) Unaffected: 4.19.276 , ≤ 4.19.* (semver) Unaffected: 5.4.235 , ≤ 5.4.* (semver) Unaffected: 5.10.173 , ≤ 5.10.* (semver) Unaffected: 5.15.99 , ≤ 5.15.* (semver) Unaffected: 6.1.16 , ≤ 6.1.* (semver) Unaffected: 6.2.3 , ≤ 6.2.* (semver) Unaffected: 6.3 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53373",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:54:09.278191Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T19:03:03.132Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "crypto/seqiv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cc4d0d4251748a8a68026938f4055d2ac47c5719",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            },
            {
              "lessThan": "1effbddaff60eeef8017c6dea1ee0ed970164d14",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            },
            {
              "lessThan": "63551e4b7cbcd9914258827699eb2cb6ed6e4a16",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            },
            {
              "lessThan": "ae849d2f48019ff9c104e32bf588ccbfb200e971",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            },
            {
              "lessThan": "36ec108b7bd7e280edb22de028467bd09d644620",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            },
            {
              "lessThan": "4d497e8b200a175094e0ac252ed878add39b8771",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            },
            {
              "lessThan": "9477db935eb690f697d9bcc4f608927841bc8b36",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            },
            {
              "lessThan": "32e62025e5e52fbe4812ef044759de7010b15dbc",
              "status": "affected",
              "version": "0a270321dbf948963aeb0e8382fe17d2c2eb3771",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "crypto/seqiv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.25"
            },
            {
              "lessThan": "2.6.25",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.308",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.276",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.235",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.173",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.99",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.308",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.276",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.235",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.173",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.99",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.16",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.3",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: seqiv - Handle EBUSY correctly\n\nAs it is seqiv only handles the special return value of EINPROGERSS,\nwhich means that in all other cases it will free data related to the\nrequest.\n\nHowever, as the caller of seqiv may specify MAY_BACKLOG, we also need\nto expect EBUSY and treat it in the same way.  Otherwise backlogged\nrequests will trigger a use-after-free."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable seqiv encrypt completion path is reachable locally via the unprivileged AF_ALG AEAD interface (algif_aead), which passes CRYPTO_TFM_REQ_MAY_BACKLOG into seqiv; IPsec ESP aligns IVs and does not set MAY_BACKLOG, so it is not a remote trigger.\nAC:L - An attacker can open concurrent AF_ALG requests to saturate an asynchronous/hardware crypto queue so crypto_enqueue_request returns -EBUSY, and can select backends with a non-zero alignmask so the unaligned-IV kmemdup path runs; both conditions are attacker-influenced.\nPR:L - AF_ALG socket bind/accept/setkey/encrypt requires only an unprivileged local account; there is no capability check on the algif_aead path that reaches seqiv.\nUI:N - Exploitation is performed entirely by the attacker\u2019s own AF_ALG syscalls; no victim action is required.\nS:U - A successful kernel UAF yields privilege escalation within the same host kernel authority, with no VM/IOMMU/sandbox boundary crossing.\nC:H - The bug frees the temporary IV while the backlogged request still references it, giving a use-after-free that can be leveraged for arbitrary kernel memory disclosure.\nI:H - The same UAF/double-free of the IV buffer enables heap reuse and corruption suitable for arbitrary write or control-flow hijacking in the kernel.\nA:H - Use-after-free and double-free of the IV during backlog completion can oops/panic the kernel even without a full exploit."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:13:41.953Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cc4d0d4251748a8a68026938f4055d2ac47c5719"
        },
        {
          "url": "https://git.kernel.org/stable/c/1effbddaff60eeef8017c6dea1ee0ed970164d14"
        },
        {
          "url": "https://git.kernel.org/stable/c/63551e4b7cbcd9914258827699eb2cb6ed6e4a16"
        },
        {
          "url": "https://git.kernel.org/stable/c/ae849d2f48019ff9c104e32bf588ccbfb200e971"
        },
        {
          "url": "https://git.kernel.org/stable/c/36ec108b7bd7e280edb22de028467bd09d644620"
        },
        {
          "url": "https://git.kernel.org/stable/c/4d497e8b200a175094e0ac252ed878add39b8771"
        },
        {
          "url": "https://git.kernel.org/stable/c/9477db935eb690f697d9bcc4f608927841bc8b36"
        },
        {
          "url": "https://git.kernel.org/stable/c/32e62025e5e52fbe4812ef044759de7010b15dbc"
        }
      ],
      "title": "crypto: seqiv - Handle EBUSY correctly",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53373",
    "datePublished": "2025-09-18T13:33:20.264Z",
    "dateReserved": "2025-09-17T14:54:09.734Z",
    "dateUpdated": "2026-08-05T09:13:41.953Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53494 (GCVE-0-2023-53494)

Vulnerability from cvelistv5 – Published: 2025-10-01 11:45 – Updated: 2026-08-05 09:14

Title

crypto: xts - Handle EBUSY correctly

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/92a07ba4f0af2cccd…
https://git.kernel.org/stable/c/912eb10b65646ffd2…
https://git.kernel.org/stable/c/57c3e1d63b63dc084…
https://git.kernel.org/stable/c/d5870848879291700…
https://git.kernel.org/stable/c/51c082514c2dedf27…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 8083b1bf8163e7ae7d8c90f221106d96450b8aa8 , < 92a07ba4f0af2cccdc2aa5ee32679c9c9714db90 (git) Affected: 8083b1bf8163e7ae7d8c90f221106d96450b8aa8 , < 912eb10b65646ffd222256c78a1c566a3dac177d (git) Affected: 8083b1bf8163e7ae7d8c90f221106d96450b8aa8 , < 57c3e1d63b63dc0841d41df729297cd7c1c35808 (git) Affected: 8083b1bf8163e7ae7d8c90f221106d96450b8aa8 , < d5870848879291700fe6c5257dcb48aadd10425c (git) Affected: 8083b1bf8163e7ae7d8c90f221106d96450b8aa8 , < 51c082514c2dedf2711c99d93c196cc4eedceb40 (git)
Linux	Linux	Affected: 5.4 Unaffected: 0 , < 5.4 (semver) Unaffected: 5.10.173 , ≤ 5.10.* (semver) Unaffected: 5.15.99 , ≤ 5.15.* (semver) Unaffected: 6.1.16 , ≤ 6.1.* (semver) Unaffected: 6.2.3 , ≤ 6.2.* (semver) Unaffected: 6.3 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "crypto/xts.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "92a07ba4f0af2cccdc2aa5ee32679c9c9714db90",
              "status": "affected",
              "version": "8083b1bf8163e7ae7d8c90f221106d96450b8aa8",
              "versionType": "git"
            },
            {
              "lessThan": "912eb10b65646ffd222256c78a1c566a3dac177d",
              "status": "affected",
              "version": "8083b1bf8163e7ae7d8c90f221106d96450b8aa8",
              "versionType": "git"
            },
            {
              "lessThan": "57c3e1d63b63dc0841d41df729297cd7c1c35808",
              "status": "affected",
              "version": "8083b1bf8163e7ae7d8c90f221106d96450b8aa8",
              "versionType": "git"
            },
            {
              "lessThan": "d5870848879291700fe6c5257dcb48aadd10425c",
              "status": "affected",
              "version": "8083b1bf8163e7ae7d8c90f221106d96450b8aa8",
              "versionType": "git"
            },
            {
              "lessThan": "51c082514c2dedf2711c99d93c196cc4eedceb40",
              "status": "affected",
              "version": "8083b1bf8163e7ae7d8c90f221106d96450b8aa8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "crypto/xts.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.173",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.99",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.173",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.99",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.16",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.3",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: xts - Handle EBUSY correctly\n\nAs it is xts only handles the special return value of EINPROGRESS,\nwhich means that in all other cases it will free data related to the\nrequest.\n\nHowever, as the caller of xts may specify MAY_BACKLOG, we also need\nto expect EBUSY and treat it in the same way.  Otherwise backlogged\nrequests will trigger a use-after-free."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The only practical trigger for the XTS ciphertext-stealing path with CRYPTO_TFM_REQ_MAY_BACKLOG is the local AF_ALG socket interface (crypto/algif_skcipher.c), reached via socket()/bind()/sendmsg()/recvmsg(); no in-kernel network consumer uses XTS with unaligned lengths.\nAC:L - The attacker controls every precondition: they choose the async XTS instantiation by name, choose a cryptlen that is not a multiple of 16 to force the CTS path, and saturate the child driver\u0027s backlog queue themselves (crypto_engine default depth is 10, cryptd is per-CPU and can be filled with pinned threads) so the tail request reliably returns -EBUSY.\nPR:L - Opening an AF_ALG socket and binding an arbitrary skcipher template name requires no capabilities, only an unprivileged local account on a kernel with CONFIG_CRYPTO_USER_API_SKCIPHER (standard on distro and Android kernels).\nUI:N - The attacker performs the entire sequence from their own process; no victim action or cooperation is needed.\nS:U - The use-after-free corrupts kernel heap memory within the same kernel security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - After the request is freed, xts_cts_done() dereferences rctx-\u003etail \u2014 a scatterlist pointer read from reclaimed, attacker-sprayable memory \u2014 and copies 16 bytes out of it, yielding a controlled kernel-memory read that can be used to disclose arbitrary kernel data.\nI:H - The same forged scatterlist is written back through scatterwalk_map_and_copy(), giving a controlled kernel write, and skcipher_request_complete() then calls req-\u003ebase.complete \u2014 a function pointer taken from freed memory \u2014 enabling control-flow hijack and full privilege escalation.\nA:H - Even without successful exploitation the double completion and use-after-free corrupt the crypto request and its owner\u0027s socket state, producing KASAN splats, oopses, or a kernel panic."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:26.466Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/92a07ba4f0af2cccdc2aa5ee32679c9c9714db90"
        },
        {
          "url": "https://git.kernel.org/stable/c/912eb10b65646ffd222256c78a1c566a3dac177d"
        },
        {
          "url": "https://git.kernel.org/stable/c/57c3e1d63b63dc0841d41df729297cd7c1c35808"
        },
        {
          "url": "https://git.kernel.org/stable/c/d5870848879291700fe6c5257dcb48aadd10425c"
        },
        {
          "url": "https://git.kernel.org/stable/c/51c082514c2dedf2711c99d93c196cc4eedceb40"
        }
      ],
      "title": "crypto: xts - Handle EBUSY correctly",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53494",
    "datePublished": "2025-10-01T11:45:45.773Z",
    "dateReserved": "2025-10-01T11:39:39.403Z",
    "dateUpdated": "2026-08-05T09:14:26.466Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-38566 (GCVE-0-2025-38566)

Vulnerability from cvelistv5 – Published: 2025-08-19 17:02 – Updated: 2026-08-05 12:02

Title

sunrpc: fix handling of server side tls alerts

Summary

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/b1df394621710b312…
https://git.kernel.org/stable/c/25bb3647d30a20486…
https://git.kernel.org/stable/c/3b549da875414989f…
https://git.kernel.org/stable/c/6b33c31cc788073bf…
https://git.kernel.org/stable/c/bee47cb026e762841…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 5e052dda121e2870dd87181783da4a95d7d2927b , < b1df394621710b312f0393e3f240fdac0764f968 (git) Affected: 5e052dda121e2870dd87181783da4a95d7d2927b , < 25bb3647d30a20486b5fe7cff2b0e503c16c9692 (git) Affected: 5e052dda121e2870dd87181783da4a95d7d2927b , < 3b549da875414989f480b66835d514be80a0bd9c (git) Affected: 5e052dda121e2870dd87181783da4a95d7d2927b , < 6b33c31cc788073bfbed9297e1f4486ed73d87da (git) Affected: 5e052dda121e2870dd87181783da4a95d7d2927b , < bee47cb026e762841f3faece47b51f985e215edb (git)
Linux	Linux	Affected: 6.4 Unaffected: 0 , < 6.4 (semver) Unaffected: 6.6.102 , ≤ 6.6.* (semver) Unaffected: 6.12.42 , ≤ 6.12.* (semver) Unaffected: 6.15.10 , ≤ 6.15.* (semver) Unaffected: 6.16.1 , ≤ 6.16.* (semver) Unaffected: 6.17 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/svcsock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b1df394621710b312f0393e3f240fdac0764f968",
              "status": "affected",
              "version": "5e052dda121e2870dd87181783da4a95d7d2927b",
              "versionType": "git"
            },
            {
              "lessThan": "25bb3647d30a20486b5fe7cff2b0e503c16c9692",
              "status": "affected",
              "version": "5e052dda121e2870dd87181783da4a95d7d2927b",
              "versionType": "git"
            },
            {
              "lessThan": "3b549da875414989f480b66835d514be80a0bd9c",
              "status": "affected",
              "version": "5e052dda121e2870dd87181783da4a95d7d2927b",
              "versionType": "git"
            },
            {
              "lessThan": "6b33c31cc788073bfbed9297e1f4486ed73d87da",
              "status": "affected",
              "version": "5e052dda121e2870dd87181783da4a95d7d2927b",
              "versionType": "git"
            },
            {
              "lessThan": "bee47cb026e762841f3faece47b51f985e215edb",
              "status": "affected",
              "version": "5e052dda121e2870dd87181783da4a95d7d2927b",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/svcsock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.4"
            },
            {
              "lessThan": "6.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.102",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.16.*",
              "status": "unaffected",
              "version": "6.16.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.102",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.42",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.10",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16.1",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix handling of server side tls alerts\n\nScott Mayhew discovered a security exploit in NFS over TLS in\ntls_alert_recv() due to its assumption it can read data from\nthe msg iterator\u0027s kvec..\n\nkTLS implementation splits TLS non-data record payload between\nthe control message buffer (which includes the type such as TLS\naler or TLS cipher change) and the rest of the payload (say TLS\nalert\u0027s level/description) which goes into the msg payload buffer.\n\nThis patch proposes to rework how control messages are setup and\nused by sock_recvmsg().\n\nIf no control message structure is setup, kTLS layer will read and\nprocess TLS data record types. As soon as it encounters a TLS control\nmessage, it would return an error. At that point, NFS can setup a\nkvec backed msg buffer and read in the control message such as a\nTLS alert. Msg iterator can advance the kvec pointer as a part of\nthe copy process thus we need to revert the iterator before calling\ninto the tls_alert_recv."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable code is nfsd\u0027s server-side RPC-over-TLS receive path (net/sunrpc/svcsock.c), driven entirely by TLS records arriving on the TCP/2049 listener; a remote peer triggers it by sending a TLS alert record.\nAC:L - The attacker deterministically controls every precondition \u2014 complete the TLS handshake, send exactly 2 bytes of an RPC fragment marker to set sk_tcplen=2, then send any TLS alert, which exactly consumes the 2-byte kvec and forces the iterator past the end of the stack array; it can be repeated on unlimited connections.\nPR:N - svcauth_tls_accept() processes the AUTH_TLS STARTTLS probe on the NULL procedure with no credentials, and svc_tcp_handshake_done() enables kTLS even when the peer presents no certificate (TLS_NO_PEERID); export/mtls policy is only enforced far later, so the bug is reachable entirely pre-authentication.\nUI:N - The nfsd service threads process incoming TLS records autonomously; no local user or administrator action is needed once the server is listening.\nS:U - The out-of-bounds read and pointer dereference occur within the kernel\u0027s own memory and security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - tls_alert_recv() reads kernel memory through an out-of-bounds kvec element (stack contents reinterpreted as a pointer) and, in the bvec path, through a struct page * reinterpreted as a data buffer \u2014 an unbounded-address kernel read whose result is reflected back to the attacker as an observable connection-teardown oracle (-ENOTCONN vs -EAGAIN).\nI:H - This is a genuine type confusion (struct bio_vec / stale stack memory consumed as struct kvec) plus an out-of-bounds array access, and attacker-supplied alert bytes are written into kernel RPC state (svsk-\u003esk_marker, rq_pages) outside the protocol\u0027s intended flow, with the confused read steering kernel control flow.\nA:H - Dereferencing the pointer-sized value read past the end of the stack-allocated kvec (frequently NULL or a non-canonical/unmapped address) faults inside an nfsd service thread, producing a kernel oops and taking down the NFS server."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:02:56.367Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b1df394621710b312f0393e3f240fdac0764f968"
        },
        {
          "url": "https://git.kernel.org/stable/c/25bb3647d30a20486b5fe7cff2b0e503c16c9692"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b549da875414989f480b66835d514be80a0bd9c"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b33c31cc788073bfbed9297e1f4486ed73d87da"
        },
        {
          "url": "https://git.kernel.org/stable/c/bee47cb026e762841f3faece47b51f985e215edb"
        }
      ],
      "title": "sunrpc: fix handling of server side tls alerts",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38566",
    "datePublished": "2025-08-19T17:02:42.506Z",
    "dateReserved": "2025-04-16T04:51:24.025Z",
    "dateUpdated": "2026-08-05T12:02:56.367Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-38571 (GCVE-0-2025-38571)

Vulnerability from cvelistv5 – Published: 2025-08-19 17:02 – Updated: 2026-08-05 12:02

Title

sunrpc: fix client side handling of tls alerts

Summary

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/a55b3d15331859d9f…
https://git.kernel.org/stable/c/c36b2fbd60e8f9c6f…
https://git.kernel.org/stable/c/3ee397eaaca4fa04d…
https://git.kernel.org/stable/c/3feada5baf4dc96e1…
https://git.kernel.org/stable/c/cc5d59081fa26506d…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: dea034b963c8901bdcc3d3880c04f0d75c95112f , < a55b3d15331859d9fdd261cfa6d34ca2aeb0fb95 (git) Affected: dea034b963c8901bdcc3d3880c04f0d75c95112f , < c36b2fbd60e8f9c6f975522130998608880c93be (git) Affected: dea034b963c8901bdcc3d3880c04f0d75c95112f , < 3ee397eaaca4fa04db21bb98c8f1d0c6cc525368 (git) Affected: dea034b963c8901bdcc3d3880c04f0d75c95112f , < 3feada5baf4dc96e151ff2ca54630e1d274e5458 (git) Affected: dea034b963c8901bdcc3d3880c04f0d75c95112f , < cc5d59081fa26506d02de2127ab822f40d88bc5a (git)
Linux	Linux	Affected: 6.5 Unaffected: 0 , < 6.5 (semver) Unaffected: 6.6.102 , ≤ 6.6.* (semver) Unaffected: 6.12.42 , ≤ 6.12.* (semver) Unaffected: 6.15.10 , ≤ 6.15.* (semver) Unaffected: 6.16.1 , ≤ 6.16.* (semver) Unaffected: 6.17 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/xprtsock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a55b3d15331859d9fdd261cfa6d34ca2aeb0fb95",
              "status": "affected",
              "version": "dea034b963c8901bdcc3d3880c04f0d75c95112f",
              "versionType": "git"
            },
            {
              "lessThan": "c36b2fbd60e8f9c6f975522130998608880c93be",
              "status": "affected",
              "version": "dea034b963c8901bdcc3d3880c04f0d75c95112f",
              "versionType": "git"
            },
            {
              "lessThan": "3ee397eaaca4fa04db21bb98c8f1d0c6cc525368",
              "status": "affected",
              "version": "dea034b963c8901bdcc3d3880c04f0d75c95112f",
              "versionType": "git"
            },
            {
              "lessThan": "3feada5baf4dc96e151ff2ca54630e1d274e5458",
              "status": "affected",
              "version": "dea034b963c8901bdcc3d3880c04f0d75c95112f",
              "versionType": "git"
            },
            {
              "lessThan": "cc5d59081fa26506d02de2127ab822f40d88bc5a",
              "status": "affected",
              "version": "dea034b963c8901bdcc3d3880c04f0d75c95112f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sunrpc/xprtsock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.5"
            },
            {
              "lessThan": "6.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.102",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.16.*",
              "status": "unaffected",
              "version": "6.16.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.102",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.42",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.10",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16.1",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix client side handling of tls alerts\n\nA security exploit was discovered in NFS over TLS in tls_alert_recv\ndue to its assumption that there is valid data in the msghdr\u0027s\niterator\u0027s kvec.\n\nInstead, this patch proposes the rework how control messages are\nsetup and used by sock_recvmsg().\n\nIf no control message structure is setup, kTLS layer will read and\nprocess TLS data record types. As soon as it encounters a TLS control\nmessage, it would return an error. At that point, NFS can setup a kvec\nbacked control buffer and read in the control message such as a TLS\nalert. Scott found that a msg iterator can advance the kvec pointer\nas a part of the copy process thus we need to revert the iterator\nbefore calling into the tls_alert_recv."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable code is the SUNRPC/NFS client\u0027s TCP-with-TLS receive path, driven entirely by records arriving from the remote RPC peer over the network. A malicious NFS server \u2014 or, with `xprtsec=tls` (anonymous TLS, `tls_client_hello_anon`), any on-path attacker impersonating it \u2014 triggers the bug purely by sending crafted RPC framing followed by a TLS alert record.\nAC:L - The attacker controls both halves of the trigger: an RPC fragment with a bogus calldir or unmatched XID forces the client into the `ITER_DISCARD` path, and an ordinary TLS alert record (even a close_notify) is then sent at will, yielding a deterministic NULL dereference with no race, no memory-layout guessing, and no reliance on victim state.\nPR:N - No credentials or privileges on the victim client are needed; the attacker acts as the TLS peer. With `xprtsec=tls` the peer is entirely unauthenticated (RFC 9289 opportunistic TLS), so even an unauthenticated MITM qualifies, and alerts are processed regardless of RPC-level authentication.\nUI:N - Exploitation needs no action from any user or administrator at attack time \u2014 the NFS-over-TLS mount is pre-existing, and the bug fires from the `xprtiod` workqueue receive path as soon as the attacker\u0027s records arrive.\nS:U - The faulting code, the corrupted read, and the resulting crash are all inside the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:L - On the bvec and past-the-end-kvec paths `tls_alert_recv()` reads two bytes through a type-confused or out-of-bounds pointer (a `struct page *` mistaken for `iov_base`, or an adjacent stack/heap word), leaking kernel memory into the `tls_alert_recv` tracepoint and into a fatal/non-fatal error oracle. The disclosure is real but strictly bounded to two bytes and is not returned to the attacker in bulk.\nI:N - `tls_alert_recv()` only reads through the bad pointer \u2014 there is no out-of-bounds write, no use-after-free, and no type confusion that yields a write primitive. The only effect is a bogus alert level selecting `-EACCES` versus `-EAGAIN` in the client\u0027s error handling.\nA:H - The `ITER_DISCARD` path dereferences a NULL kvec (and the exhausted-kvec path dereferences a garbage pointer read past the array), producing a kernel oops in the `xprtiod` kworker that kills the RPC receive worker and wedges all NFS I/O on that transport, or panics the machine outright where `panic_on_oops` is set."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:02:59.633Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a55b3d15331859d9fdd261cfa6d34ca2aeb0fb95"
        },
        {
          "url": "https://git.kernel.org/stable/c/c36b2fbd60e8f9c6f975522130998608880c93be"
        },
        {
          "url": "https://git.kernel.org/stable/c/3ee397eaaca4fa04db21bb98c8f1d0c6cc525368"
        },
        {
          "url": "https://git.kernel.org/stable/c/3feada5baf4dc96e151ff2ca54630e1d274e5458"
        },
        {
          "url": "https://git.kernel.org/stable/c/cc5d59081fa26506d02de2127ab822f40d88bc5a"
        }
      ],
      "title": "sunrpc: fix client side handling of tls alerts",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38571",
    "datePublished": "2025-08-19T17:02:51.620Z",
    "dateReserved": "2025-04-16T04:51:24.025Z",
    "dateUpdated": "2026-08-05T12:02:59.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-39702 (GCVE-0-2025-39702)

Vulnerability from cvelistv5 – Published: 2025-09-05 17:21 – Updated: 2026-08-05 12:04

Title

ipv6: sr: Fix MAC comparison to be constant-time

Summary

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/ff55a452d56490047…
https://git.kernel.org/stable/c/3b348c9c8d2ca2c67…
https://git.kernel.org/stable/c/86b6d34717fe0570a…
https://git.kernel.org/stable/c/3ddd55cf19ed6cc62…
https://git.kernel.org/stable/c/b3967c493799e63f6…
https://git.kernel.org/stable/c/f7878d47560d61e3f…
https://git.kernel.org/stable/c/a458b2902115b26a2…
https://lists.debian.org/debian-lts-announce/2025…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: bf355b8d2c30a289232042cacc1cfaea4923936c , < ff55a452d56490047f5233cc48c5d933f8586884 (git) Affected: bf355b8d2c30a289232042cacc1cfaea4923936c , < 3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0 (git) Affected: bf355b8d2c30a289232042cacc1cfaea4923936c , < 86b6d34717fe0570afce07ee79b8eeb40341f831 (git) Affected: bf355b8d2c30a289232042cacc1cfaea4923936c , < 3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3 (git) Affected: bf355b8d2c30a289232042cacc1cfaea4923936c , < b3967c493799e63f648e9c7b6cb063aa2aed04e7 (git) Affected: bf355b8d2c30a289232042cacc1cfaea4923936c , < f7878d47560d61e3f370aca3cebb8f42a55b990a (git) Affected: bf355b8d2c30a289232042cacc1cfaea4923936c , < a458b2902115b26a25d67393b12ddd57d1216aaa (git)
Linux	Linux	Affected: 4.10 Unaffected: 0 , < 4.10 (semver) Unaffected: 5.10.249 , ≤ 5.10.* (semver) Unaffected: 5.15.190 , ≤ 5.15.* (semver) Unaffected: 6.1.149 , ≤ 6.1.* (semver) Unaffected: 6.6.103 , ≤ 6.6.* (semver) Unaffected: 6.12.44 , ≤ 6.12.* (semver) Unaffected: 6.16.4 , ≤ 6.16.* (semver) Unaffected: 6.17 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC CN 4100	Affected: 0 , < V5.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T17:42:30.669Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC CN 4100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T12:06:24.521Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/seg6_hmac.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ff55a452d56490047f5233cc48c5d933f8586884",
              "status": "affected",
              "version": "bf355b8d2c30a289232042cacc1cfaea4923936c",
              "versionType": "git"
            },
            {
              "lessThan": "3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0",
              "status": "affected",
              "version": "bf355b8d2c30a289232042cacc1cfaea4923936c",
              "versionType": "git"
            },
            {
              "lessThan": "86b6d34717fe0570afce07ee79b8eeb40341f831",
              "status": "affected",
              "version": "bf355b8d2c30a289232042cacc1cfaea4923936c",
              "versionType": "git"
            },
            {
              "lessThan": "3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3",
              "status": "affected",
              "version": "bf355b8d2c30a289232042cacc1cfaea4923936c",
              "versionType": "git"
            },
            {
              "lessThan": "b3967c493799e63f648e9c7b6cb063aa2aed04e7",
              "status": "affected",
              "version": "bf355b8d2c30a289232042cacc1cfaea4923936c",
              "versionType": "git"
            },
            {
              "lessThan": "f7878d47560d61e3f370aca3cebb8f42a55b990a",
              "status": "affected",
              "version": "bf355b8d2c30a289232042cacc1cfaea4923936c",
              "versionType": "git"
            },
            {
              "lessThan": "a458b2902115b26a25d67393b12ddd57d1216aaa",
              "status": "affected",
              "version": "bf355b8d2c30a289232042cacc1cfaea4923936c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/seg6_hmac.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "lessThan": "4.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.190",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.149",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.16.*",
              "status": "unaffected",
              "version": "6.16.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.249",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.190",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.149",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.103",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.44",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16.4",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: Fix MAC comparison to be constant-time\n\nTo prevent timing attacks, MACs need to be compared in constant time.\nUse the appropriate helper function for this."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable comparison sits in the IPv6 Segment Routing Header receive path (`ipv6_srh_rcv()` and the seg6_local behaviors), processing routed IPv6 packets from any remote source. SRv6 packets are not link-local, so an attacker anywhere on the network can drive the oracle.\nAC:L - The attacker controls both sides of the measurement \u2014 the candidate MAC bytes and an unlimited, self-paced stream of probe packets \u2014 so the byte-at-a-time `memcmp` leak can be amplified by repetition and statistical averaging, including jitter-immune concurrent-probe techniques. No condition depends on state the attacker cannot influence.\nPR:N - The HMAC validation is itself the authentication gate for the SR domain; nothing on the path from packet receive to `seg6_hmac_validate_skb()` checks any credential or capability. The attacker is an unauthenticated off-path/off-domain sender.\nUI:N - Exploitation requires only sending crafted SRv6 packets to the target; no victim action is involved.\nS:U - The forged authentication is consumed and acted upon within the same kernel networking authority that performs the check; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Forging the SRH MAC bypasses the SR-domain trust boundary, letting the attacker source-route packets to otherwise unreachable internal nodes and, via End.DT4/DT6/DX behaviors, into isolated tenant VRFs and L2 domains, with the return path steerable back to the attacker. The timing oracle additionally recovers secret-key-derived MAC values.\nI:H - A recovered MAC makes the kernel accept attacker-crafted segment lists as authentic, allowing arbitrary rewriting of forwarding paths and injection of spoofed traffic into tenant networks and internal L2 bridges \u2014 a complete authentication bypass of the SRv6 integrity mechanism.\nA:H - Forged segment lists can be built to loop packets repeatedly between SR nodes and to blackhole or misdirect legitimate traffic, disrupting forwarding for the node and the SR domain it serves."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:04:40.981Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ff55a452d56490047f5233cc48c5d933f8586884"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0"
        },
        {
          "url": "https://git.kernel.org/stable/c/86b6d34717fe0570afce07ee79b8eeb40341f831"
        },
        {
          "url": "https://git.kernel.org/stable/c/3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3"
        },
        {
          "url": "https://git.kernel.org/stable/c/b3967c493799e63f648e9c7b6cb063aa2aed04e7"
        },
        {
          "url": "https://git.kernel.org/stable/c/f7878d47560d61e3f370aca3cebb8f42a55b990a"
        },
        {
          "url": "https://git.kernel.org/stable/c/a458b2902115b26a25d67393b12ddd57d1216aaa"
        }
      ],
      "title": "ipv6: sr: Fix MAC comparison to be constant-time",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-39702",
    "datePublished": "2025-09-05T17:21:08.674Z",
    "dateReserved": "2025-04-16T07:20:57.115Z",
    "dateUpdated": "2026-08-05T12:04:40.981Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2025:21112

BDU:2026-02517 (CVE-2023-53373)

BDU:2026-06009 (CVE-2023-53331)

CVE-2022-50087 (GCVE-0-2022-50087)

CVE-2022-50367 (GCVE-0-2022-50367)

CVE-2023-53331 (GCVE-0-2023-53331)

CVE-2023-53373 (GCVE-0-2023-53373)

CVE-2023-53494 (GCVE-0-2023-53494)

CVE-2025-38566 (GCVE-0-2025-38566)

CVE-2025-38571 (GCVE-0-2025-38571)

CVE-2025-39702 (GCVE-0-2025-39702)

Tags

Sightings

Nomenclature

Related by attack behaviour