{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2023-4128 Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206 CVE-2023-4207 CVE-2023-4208.  Reason: This record is a duplicate of CVE-2023-4206 CVE-2023-4207 CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206 CVE-2023-4207 CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage. - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-4128.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206 CVE-2023-4207 CVE-2023-4208.  Reason: This record is a duplicate of CVE-2023-4206 CVE-2023-4207 CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206 CVE-2023-4207 CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
    "tracking": {
      "current_release_date": "2023-08-19T00:00:00.000Z",
      "generator": {
        "date": "2025-10-20T00:37:53.024Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2023-4128",
      "initial_release_date": "2023-08-01T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-08-19T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 kernel 5.15.126.1-1",
                "product": {
                  "name": "\u003ccbl2 kernel 5.15.126.1-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 kernel 5.15.126.1-1",
                "product": {
                  "name": "cbl2 kernel 5.15.126.1-1",
                  "product_id": "17832"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 kernel 5.15.126.1-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 kernel 5.15.126.1-1 as a component of CBL Mariner 2.0",
          "product_id": "17832-17086"
        },
        "product_reference": "17832",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-4128",
      "notes": [
        {
          "category": "general",
          "text": "redhat",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "17832-17086"
        ],
        "known_affected": [
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-4128 Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206 CVE-2023-4207 CVE-2023-4208.  Reason: This record is a duplicate of CVE-2023-4206 CVE-2023-4207 CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206 CVE-2023-4207 CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage. - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-4128.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-08-19T00:00:00.000Z",
          "details": "5.15.126.1-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "title": "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206 CVE-2023-4207 CVE-2023-4208.  Reason: This record is a duplicate of CVE-2023-4206 CVE-2023-4207 CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206 CVE-2023-4207 CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
    }
  ]
}