Vulnerability-Lookup

RHSA-2024_2394

Vulnerability from csaf_redhat - Published: 2024-04-30 09:57 - Updated: 2024-12-12 09:49

Summary

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546) * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582) * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555) * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480) * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448) * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934) * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040) * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531) * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931) * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023) * kernel: irdma: Improper access control (CVE-2023-25775) * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464) * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866) * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083) * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194) * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756) * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863) * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) * kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489) * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522) * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581) * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578) * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580) * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610) * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565) * kernel: tls: race between async notify and socket close (CVE-2024-26583) * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584) * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585) * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586) * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593) * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609) * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176) * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476) * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2020-26555

A vulnerability was found in Linux Kernel, where Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack. When an attacker connects to a victim device using the address of the device and the victim initiates a Pairing, the attacker can reflect the encrypted nonce even without knowledge of the key.

5.4 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 885 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-64k-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-abi-stablelists-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debug-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-common-aarch64-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-common-ppc64le-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-common-s390x-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-debuginfo-common-x86_64-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-doc-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-rt-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:kernel-zfcpdump-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-64k-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-abi-stablelists-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debug-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-common-aarch64-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-common-ppc64le-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-common-s390x-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-debuginfo-common-x86_64-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-doc-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-rt-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:kernel-zfcpdump-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-64k-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-abi-stablelists-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debug-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-common-aarch64-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-common-ppc64le-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-common-s390x-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-debuginfo-common-x86_64-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-doc-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-rt-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:kernel-zfcpdump-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-64k-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-abi-stablelists-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debug-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-common-aarch64-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-common-ppc64le-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-common-s390x-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-debuginfo-common-x86_64-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-doc-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-rt-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:kernel-zfcpdump-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: NFV-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:bpftool-debuginfo-0:7.3.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-64k-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-abi-stablelists-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-cross-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debug-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-common-aarch64-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-common-ppc64le-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-common-s390x-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-debuginfo-common-x86_64-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-devel-matched-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-doc-0:5.14.0-427.13.1.el9_4.noarch	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-headers-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debug-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-kvm-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-modules-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-modules-core-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-rt-modules-extra-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-libs-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-tools-libs-devel-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-uki-virt-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-devel-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-devel-matched-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-modules-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-modules-core-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:kernel-zfcpdump-modules-extra-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:libperf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:python3-perf-debuginfo-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rtla-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: RT-9.4.0.GA:rv-0:5.14.0-427.13.1.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2022-0480

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2022-38096

A NULL pointer dereference issue was found in the Linux kernel's vmwgfx driver in vmw_cmd_dx_define_query. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl() on the resulting file descriptor, to crash the system, causing a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2022-45934

An integer overflow flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user generates malicious L2CAP_CONF_REQ packets. This flaw allows a local or bluetooth connection user to crash the system.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2022-48947

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAP_CONF_REQ packets, chan->num_conf_rsp increases multiple times and eventually it will wrap around the maximum number (i.e., 255). This patch prevents this by adding a boundary check with L2CAP_MAX_CONF_RSP Btmon log: Bluetooth monitor ver 5.64 = Note: Linux version 6.1.0-rc2 (x86_64) 0.264594 = Note: Bluetooth subsystem version 2.22 0.264636 @ MGMT Open: btmon (privileged) version 1.22 {0x0001} 0.272191 = New Index: 00:00:00:00:00:00 (Primary,Virtual,hci0) [hci0] 13.877604 @ RAW Open: 9496 (privileged) version 2.22 {0x0002} 13.890741 = Open Index: 00:00:00:00:00:00 [hci0] 13.900426 (...) > ACL Data RX: Handle 200 flags 0x00 dlen 1033 #32 [hci0] 14.273106 invalid packet size (12 != 1033) 08 00 01 00 02 01 04 00 01 10 ff ff ............ > ACL Data RX: Handle 200 flags 0x00 dlen 1547 #33 [hci0] 14.273561 invalid packet size (14 != 1547) 0a 00 01 00 04 01 06 00 40 00 00 00 00 00 ........@..... > ACL Data RX: Handle 200 flags 0x00 dlen 2061 #34 [hci0] 14.274390 invalid packet size (16 != 2061) 0c 00 01 00 04 01 08 00 40 00 00 00 00 00 00 04 ........@....... > ACL Data RX: Handle 200 flags 0x00 dlen 2061 #35 [hci0] 14.274932 invalid packet size (16 != 2061) 0c 00 01 00 04 01 08 00 40 00 00 00 07 00 03 00 ........@....... = bluetoothd: Bluetooth daemon 5.43 14.401828 > ACL Data RX: Handle 200 flags 0x00 dlen 1033 #36 [hci0] 14.275753 invalid packet size (12 != 1033) 08 00 01 00 04 01 04 00 40 00 00 00 ........@...

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2022-49011

A counting logic flaw exists in the Linux kernel. When ci_get_domain_bus_and_slot() is called, it returns a pci device with refcount incremented. When finishing it, the caller must decrement the reference count by calling pci_dev_put(), leading to the loss of confidentiality of the system.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-3567

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-4133

A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-6040

An out-of-bounds access vulnerability was found in the Linux Kernel. This issue occurs during the creation of a new netfilter table. The absence of safeguards in the nf_tables_newtable function against invalid nf_tables family (pf) values allows attackers to achieve unauthorized access. Exploitation occurs in two locations: the xt_find_target function in x_tables.c permits faking xt_af data, and the nf_logger_find_get function in nf_log.c can enable an attacker to use an invalid pf to dereference adjacent global data. By manipulating these values, an attacker could achieve unauthorized access beyond the intended boundaries.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-6121

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2023-6176

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2023-6531

A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-6546

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Important

CVE-2023-6622

A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-6915

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-6931

A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-6932

A race condition has been discovered in the Linux kernel's Internet Group Management Protocol (IGMP) implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the normal operation of affected systems, leading to service disruption or, in the worst case, unauthorized access to sensitive resources.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-24023

A flaw was found in Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4. This issue may allow certain man-in-the-middle attacks that force a short key length and might lead to discovery of the encryption key and live injection, aka BLUFFS.

6.8 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-300 - Channel Accessible by Non-Endpoint

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-25775

An improper access control flaw was found in the Intel(R) Ethernet Controller RDMA driver in the Linux Kernel. This flaw allows an unauthenticated user to enable privilege escalation via network access.

5.6 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-284 - Improper Access Control

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-28464

A double-free vulnerability was found in the hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux Kernel. This issue may cause a denial of service or privilege escalation.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-28866

An out-of-bounds (OOB) memory access flaw was found in net/bluetooth/hci_sync.c due to a missing exit patch while in loop in amp_init1[] and amp_init2[]. This issue could allow an attacker to leak internal kernel information.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-31083

A NULL pointer dereference flaw was found in the Linux kernel’s Bluetooth HCI UART driver. This flaw allows a local user to crash the system.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-37453

An out-of-bounds read issue was found in the USB subsystem in the Linux kernel. This flaw allows a malicious user to crash the system, resulting in a denial of service condition.

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-39189

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-39193

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-39194

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2023-39198

A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.

7.5 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-42754

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-42756

A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-45863

An out-of-bounds memory write flaw was found in the load/unload module in the Linux kernel's kobject functionality, potentially triggering a race condition in the kobject_get_path function. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-46862

A null pointer dereference flaw was found in the Linux kernel's io_uring functionality. This issue could allow a local user to crash the system.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-51043

A flaw was found in the Linux kernel Direct Rendering Infrastructure (DRI) subsystem in which a use-after-free can be caused when a user triggers a race condition between a nonblocking atomic commit and a driver unload. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-51779

A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the bt_sock_recvmsg() and bt_sock_ioctl() functions could lead to a use-after-free on a socket buffer ("skb"). This flaw allows a local user to cause a denial of service condition or potential code execution.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-51780

A use-after-free flaw was found in the Linux kernel's net/atm/ioctl.c (ATM networking technology driver): do_vcc_ioctl in net/atm/ioctl.c is vulnerable to use-after-free due to a race condition in vcc_recvmsg. This issue can allow an attacker to possibly gain unauthorized access, escalate privileges, or cause the system to crash.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52434

A flaw was found in the smb client in the Linux kernel. A potential out-of-bounds error was seen in the smb2_parse_contexts() function. Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().

5.9 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52448

A NULL pointer dereference flaw was found in the Linux kernel when accessing the rgd->rd_rgl in the gfs2_rgrp_dump() function. This issue may lead to a crash.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52450

A vulnerability was discovered in the Linux kernel in which certain CPU topologies could result in a null pointer dereference, affecting system stability.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52476

In the Linux kernel, the following vulnerability has been resolved: perf/x86/lbr: Filter vsyscall addresses We found that a panic can occur when a vsyscall is made while LBR sampling is active. If the vsyscall is interrupted (NMI) for perf sampling, this call sequence can occur (most recent at top): __insn_get_emulate_prefix() insn_get_emulate_prefix() insn_get_prefixes() insn_get_opcode() decode_branch_type() get_branch_type() intel_pmu_lbr_filter() intel_pmu_handle_irq() perf_event_nmi_handler() Within __insn_get_emulate_prefix() at frame 0, a macro is called: peek_nbyte_next(insn_byte_t, insn, i) Within this macro, this dereference occurs: (insn)->next_byte Inspecting registers at this point, the value of the next_byte field is the address of the vsyscall made, for example the location of the vsyscall version of gettimeofday() at 0xffffffffff600000. The access to an address in the vsyscall region will trigger an oops due to an unhandled page fault. To fix the bug, filtering for vsyscalls can be done when determining the branch type. This patch will return a "none" branch if a kernel address if found to lie in the vsyscall region.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2023-52489

A race condition was found on a PFN in the Linux Kernel, which can fall into the device memory region with the system memory configuration. Normal zone start and end PFNs contain the device memory PFNs as well, and the compaction triggered will try on the device memory PFNs and end up in NOP. This may lead to compromised Availability.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52522

A flaw was found in the Linux kernel that allows for potential store tearing within the neigh_periodic_work() function, meaning a write operation on a value is not protected properly and could result in inconsistencies if another process or thread reads from that value before the operation is complete.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52529

In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sony_probe() If an error occurs after a successful usb_alloc_urb() call, usb_free_urb() should be called.

6.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

CWE-402 - Transmission of Private Resources into a New Sphere ('Resource Leak')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2023-52574

A NULL pointer dereference flaw was found in drivers/net/team/team.c in the Linux kernel.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52578

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEV_STATS_INC() to update dev->stats fields. Handles updates to dev->stats.tx_dropped while we are at it. [1] BUG: KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish read-write to 0xffff8881374b2178 of 8 bytes by interrupt on cpu 1: br_handle_frame_finish+0xd4f/0xef0 net/bridge/br_input.c:189 br_nf_hook_thresh+0x1ed/0x220 br_nf_pre_routing_finish_ipv6+0x50f/0x540 NF_HOOK include/linux/netfilter.h:304 [inline] br_nf_pre_routing_ipv6+0x1e3/0x2a0 net/bridge/br_netfilter_ipv6.c:178 br_nf_pre_routing+0x526/0xba0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:144 [inline] nf_hook_bridge_pre net/bridge/br_input.c:272 [inline] br_handle_frame+0x4c9/0x940 net/bridge/br_input.c:417 __netif_receive_skb_core+0xa8a/0x21e0 net/core/dev.c:5417 __netif_receive_skb_one_core net/core/dev.c:5521 [inline] __netif_receive_skb+0x57/0x1b0 net/core/dev.c:5637 process_backlog+0x21f/0x380 net/core/dev.c:5965 __napi_poll+0x60/0x3b0 net/core/dev.c:6527 napi_poll net/core/dev.c:6594 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6727 __do_softirq+0xc1/0x265 kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 read-write to 0xffff8881374b2178 of 8 bytes by interrupt on cpu 0: br_handle_frame_finish+0xd4f/0xef0 net/bridge/br_input.c:189 br_nf_hook_thresh+0x1ed/0x220 br_nf_pre_routing_finish_ipv6+0x50f/0x540 NF_HOOK include/linux/netfilter.h:304 [inline] br_nf_pre_routing_ipv6+0x1e3/0x2a0 net/bridge/br_netfilter_ipv6.c:178 br_nf_pre_routing+0x526/0xba0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:144 [inline] nf_hook_bridge_pre net/bridge/br_input.c:272 [inline] br_handle_frame+0x4c9/0x940 net/bridge/br_input.c:417 __netif_receive_skb_core+0xa8a/0x21e0 net/core/dev.c:5417 __netif_receive_skb_one_core net/core/dev.c:5521 [inline] __netif_receive_skb+0x57/0x1b0 net/core/dev.c:5637 process_backlog+0x21f/0x380 net/core/dev.c:5965 __napi_poll+0x60/0x3b0 net/core/dev.c:6527 napi_poll net/core/dev.c:6594 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6727 __do_softirq+0xc1/0x265 kernel/softirq.c:553 do_softirq+0x5e/0x90 kernel/softirq.c:454 __local_bh_enable_ip+0x64/0x70 kernel/softirq.c:381 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_local_purge+0x1a8/0x1f0 net/batman-adv/translation-table.c:1356 batadv_tt_purge+0x2b/0x630 net/batman-adv/translation-table.c:3560 process_one_work kernel/workqueue.c:2630 [inline] process_scheduled_works+0x5b8/0xa30 kernel/workqueue.c:2703 worker_thread+0x525/0x730 kernel/workqueue.c:2784 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 value changed: 0x00000000000d7190 -> 0x00000000000d7191 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 14848 Comm: kworker/u4:11 Not tainted 6.6.0-rc1-syzkaller-00236-gad8a69f361b9 #0

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2023-52580

A flaw was found in the ETH_P_1588 flow dissector in the Linux Kernel, which can lead to a kernel crash.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52581

A use-after-free flaw was found in the Linux kernel’s nftables sub-component due to a race problem between the set GC and transaction in the Linux Kernel. This flaw allows a local attacker to crash the system. This flaw is similar to the previous CVE-2023-4244 but for a different part of the source code.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52597

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix setting of fpc register kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control (fpc) register of a guest cpu. The new value is tested for validity by temporarily loading it into the fpc register. This may lead to corruption of the fpc register of the host process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space. test_fp_ctl() restores the original user space / host process fpc register value, however it will be discarded, when returning to user space. In result the host process will incorrectly continue to run with the value that was supposed to be used for a guest cpu. Fix this by simply removing the test. There is another test right before the SIE context is entered which will handles invalid values. This results in a change of behaviour: invalid values will now be accepted instead of that the ioctl fails with -EINVAL. This seems to be acceptable, given that this interface is most likely not used anymore, and this is in addition the same behaviour implemented with the memory mapped interface (replace invalid values with zero) - see sync_regs() in kvm-s390.c.

4.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-20 - Improper Input Validation

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2023-52610

A memory leak flaw and potential kernel crash were found in the Linux kernel’s Conntrack module. This issue occurs when Conntrack is being used by a local user for a specific configuration, and both fragmented packets are received remotely and out of order. This flaw allows a local or remote user to crash or potentially escalate their privileges on the system.

6.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-402 - Transmission of Private Resources into a New Sphere ('Resource Leak')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2023-52620

A vulnerability was found in netfilter/nf_tables componets of Linux Kernel allows an userspace to set timeouts for anonymous sets, which are not intended to be used this way. This could lead to unexpected behaviour or security issues.

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-99 - Improper Control of Resource Identifiers ('Resource Injection')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-0565

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

6.8 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-0841

A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-1085

A double-free flaw was found in how the Linux kernel's NetFilter system marks whether a catch-all element is enabled. A local user could use this flaw to crash the system.

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-1086

A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nft_verdict_init() function, allowing positive values as a drop error within the hook verdict, therefore, the nf_hook_slow() function can cause a double-free vulnerability when NF_DROP is issued with a drop error that resembles NF_ACCEPT. The nf_tables component can be exploited to achieve local privilege escalation.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2024-25744

A flaw was found in the Linux kernel. A VMM can inject external interrupts on any arbitrary vector at any time, which may allow the guest OS to be manipulated from the VMM side.

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-26582

A use-after-free vulnerability was found in the tls subsystem of the Linux kernel. The tls_decrypt_sg() function doesn't take references on the pages from clear_skb, so the put_page() in tls_decrypt_done() releases them and a use-after-free can be triggered in process_rx_list when trying to read from the partially-read skb. This issue could lead to a denial of service condition or code execution.

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-26583

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread that calls recvmsg/sendmsg may exit as soon as the async crypto handler calls complete(); any code past that point risks touching already freed data. This could lead to a use-after-free issue and a denial of service condition.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-26584

A flaw was found in the tls subsystem of the Linux kernel. When setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on requests to the crypto API, crypto_aead_encrypt and crypto_aead_decrypt functions can return -EBUSY instead of -EINPROGRESS in valid situations. This issue could lead to undefined behavior and a denial of service condition.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-393 - Return of Wrong Status Code

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2024-26585

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(), which could lead to undefined behavior and a denial of service.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-26586

A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists (ACLs). This flaw allows a local user to crash or potentially escalate their privileges on the system.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-26593

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Fix block process call transactions According to the Intel datasheets, software must reset the block buffer index twice for block process call transactions: once before writing the outgoing data to the buffer, and once again before reading the incoming data from the buffer. The driver is currently missing the second reset, causing the wrong portion of the block buffer to be read.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2024-26602

A flaw was found in sys_membarrier in the Linux kernel in sched/membarrier in how a user calls it at too high of a frequency. This flaw allows a local user to saturate the machine.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-26609

[REJECTED CVE] An issue was identified in the Linux kernel's netfilter subsystem related to nf_tables. The issue occurs when a positive value, such as NF_ACCEPT, is provided in the upper 16 bits of NF_DROP verdict parameters, which are expected to contain valid errno values (e.g., -EPERM). This improper input handling could lead to memory corruption, potentially allowing attackers to exploit the system.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

CVE-2024-26633

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken. Reading frag_off can only be done if we pulled enough bytes to skb->head. Currently we might access garbage. [1] BUG: KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim+0x94f/0xbb0 ip6_tnl_parse_tlv_enc_lim+0x94f/0xbb0 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1326 [inline] ip6_tnl_start_xmit+0xab2/0x1a70 net/ipv6/ip6_tunnel.c:1432 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] neigh_connected_output+0x569/0x660 net/core/neighbour.c:1592 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x23a9/0x2b30 net/ipv6/ip6_output.c:137 ip6_finish_output+0x855/0x12b0 net/ipv6/ip6_output.c:222 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x323/0x610 net/ipv6/ip6_output.c:243 dst_output include/net/dst.h:451 [inline] ip6_local_out+0xe9/0x140 net/ipv6/output_core.c:155 ip6_send_skb net/ipv6/ip6_output.c:1952 [inline] ip6_push_pending_frames+0x1f9/0x560 net/ipv6/ip6_output.c:1972 rawv6_push_pending_frames+0xbe8/0xdf0 net/ipv6/raw.c:582 rawv6_sendmsg+0x2b66/0x2e70 net/ipv6/raw.c:920 inet_sendmsg+0x105/0x190 net/ipv4/af_inet.c:847 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc_node_track_caller+0x118/0x3c0 mm/slab_common.c:1027 kmalloc_reserve+0x249/0x4a0 net/core/skbuff.c:582 pskb_expand_head+0x226/0x1a00 net/core/skbuff.c:2098 __pskb_pull_tail+0x13b/0x2310 net/core/skbuff.c:2655 pskb_may_pull_reason include/linux/skbuff.h:2673 [inline] pskb_may_pull include/linux/skbuff.h:2681 [inline] ip6_tnl_parse_tlv_enc_lim+0x901/0xbb0 net/ipv6/ip6_tunnel.c:408 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1326 [inline] ip6_tnl_start_xmit+0xab2/0x1a70 net/ipv6/ip6_tunnel.c:1432 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] neigh_connected_output+0x569/0x660 net/core/neighbour.c:1592 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x23a9/0x2b30 net/ipv6/ip6_output.c:137 ip6_finish_output+0x855/0x12b0 net/ipv6/ip6_output.c:222 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x323/0x610 net/ipv6/ip6_output.c:243 dst_output include/net/dst.h:451 [inline] ip6_local_out+0xe9/0x140 net/ipv6/output_core.c:155 ip6_send_skb net/ipv6/ip6_output.c:1952 [inline] ip6_push_pending_frames+0x1f9/0x560 net/ipv6/ip6_output.c:1972 rawv6_push_pending_frames+0xbe8/0xdf0 net/ipv6/raw.c:582 rawv6_sendmsg+0x2b66/0x2e70 net/ipv6/raw.c:920 inet_sendmsg+0x105/0x190 net/ipv4/af_inet.c:847 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendms ---truncated---

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Low

CVE-2024-26671

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered with the following blk_mq_get_driver_tag() in case of getting driver tag failure. Then in __sbitmap_queue_wake_up(), waitqueue_active() may not observe the added waiter in blk_mq_mark_tag_wait() and wake up nothing, meantime blk_mq_mark_tag_wait() can't get driver tag successfully. This issue can be reproduced by running the following test in loop, and fio hang can be observed in < 30min when running it on my test VM in laptop. modprobe -r scsi_debug modprobe scsi_debug delay=0 dev_size_mb=4096 max_queue=1 host_max_queue=1 submit_queues=4 dev=`ls -d /sys/bus/pseudo/drivers/scsi_debug/adapter*/host*/target*/*/block/* | head -1 | xargs basename` fio --filename=/dev/"$dev" --direct=1 --rw=randrw --bs=4k --iodepth=1 \ --runtime=100 --numjobs=40 --time_based --name=test \ --ioengine=libaio Fix the issue by adding one explicit barrier in blk_mq_mark_tag_wait(), which is just fine in case of running out of tag.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 885 products, the same list as for CVE-2020-26555

Threats

Impact Moderate

References

392 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:2394	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1918601	external
https://bugzilla.redhat.com/show_bug.cgi?id=2049700	external
https://bugzilla.redhat.com/show_bug.cgi?id=2133452	external
https://bugzilla.redhat.com/show_bug.cgi?id=2151959	external
https://bugzilla.redhat.com/show_bug.cgi?id=2177759	external
https://bugzilla.redhat.com/show_bug.cgi?id=2185519	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188102	external
https://bugzilla.redhat.com/show_bug.cgi?id=2210024	external
https://bugzilla.redhat.com/show_bug.cgi?id=2213132	external
https://bugzilla.redhat.com/show_bug.cgi?id=2218332	external
https://bugzilla.redhat.com/show_bug.cgi?id=2219359	external
https://bugzilla.redhat.com/show_bug.cgi?id=2221039	external
https://bugzilla.redhat.com/show_bug.cgi?id=2221463	external
https://bugzilla.redhat.com/show_bug.cgi?id=2221702	external
https://bugzilla.redhat.com/show_bug.cgi?id=2226777	external
https://bugzilla.redhat.com/show_bug.cgi?id=2226787	external
https://bugzilla.redhat.com/show_bug.cgi?id=2226788	external
https://bugzilla.redhat.com/show_bug.cgi?id=2231410	external
https://bugzilla.redhat.com/show_bug.cgi?id=2239845	external
https://bugzilla.redhat.com/show_bug.cgi?id=2239848	external
https://bugzilla.redhat.com/show_bug.cgi?id=2244720	external
https://bugzilla.redhat.com/show_bug.cgi?id=2246980	external
https://bugzilla.redhat.com/show_bug.cgi?id=2250043	external
https://bugzilla.redhat.com/show_bug.cgi?id=2252731	external
https://bugzilla.redhat.com/show_bug.cgi?id=2253034	external
https://bugzilla.redhat.com/show_bug.cgi?id=2253632	external
https://bugzilla.redhat.com/show_bug.cgi?id=2254961	external
https://bugzilla.redhat.com/show_bug.cgi?id=2254982	external
https://bugzilla.redhat.com/show_bug.cgi?id=2255283	external
https://bugzilla.redhat.com/show_bug.cgi?id=2255498	external
https://bugzilla.redhat.com/show_bug.cgi?id=2256490	external
https://bugzilla.redhat.com/show_bug.cgi?id=2256822	external
https://bugzilla.redhat.com/show_bug.cgi?id=2257682	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258013	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258518	external
https://bugzilla.redhat.com/show_bug.cgi?id=2260005	external
https://bugzilla.redhat.com/show_bug.cgi?id=2262126	external
https://bugzilla.redhat.com/show_bug.cgi?id=2262127	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265285	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265517	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265518	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265519	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265520	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265645	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265646	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265653	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267041	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267695	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267750	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267758	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267760	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267761	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267788	external
https://bugzilla.redhat.com/show_bug.cgi?id=2267795	external
https://bugzilla.redhat.com/show_bug.cgi?id=2269189	external
https://bugzilla.redhat.com/show_bug.cgi?id=2269217	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270080	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270118	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270883	external
https://issues.redhat.com/browse/RHEL-15897	external
https://issues.redhat.com/browse/RHEL-15937	external
https://issues.redhat.com/browse/RHEL-16024	external
https://issues.redhat.com/browse/RHEL-17986	external
https://issues.redhat.com/browse/RHEL-19081	external
https://issues.redhat.com/browse/RHEL-2376	external
https://issues.redhat.com/browse/RHEL-2421	external
https://issues.redhat.com/browse/RHEL-2466	external
https://issues.redhat.com/browse/RHEL-2907	external
https://issues.redhat.com/browse/RHEL-3923	external
https://issues.redhat.com/browse/RHEL-5226	external
https://issues.redhat.com/browse/RHEL-5228	external
https://issues.redhat.com/browse/RHEL-6012	external
https://issues.redhat.com/browse/RHEL-7936	external
https://issues.redhat.com/browse/RHEL-9127	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2020-26555	self
https://bugzilla.redhat.com/show_bug.cgi?id=1918601	external
https://www.cve.org/CVERecord?id=CVE-2020-26555	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26555	external
https://access.redhat.com/security/cve/CVE-2022-0480	self
https://bugzilla.redhat.com/show_bug.cgi?id=2049700	external
https://www.cve.org/CVERecord?id=CVE-2022-0480	external
https://nvd.nist.gov/vuln/detail/CVE-2022-0480	external
https://github.com/kata-containers/kata-container…	external
https://lore.kernel.org/linux-mm/20210902215519.A…	external
https://access.redhat.com/security/cve/CVE-2022-38096	self
https://bugzilla.redhat.com/show_bug.cgi?id=2133452	external
https://www.cve.org/CVERecord?id=CVE-2022-38096	external
https://nvd.nist.gov/vuln/detail/CVE-2022-38096	external
https://access.redhat.com/security/cve/CVE-2022-45934	self
https://bugzilla.redhat.com/show_bug.cgi?id=2151959	external
https://www.cve.org/CVERecord?id=CVE-2022-45934	external
https://nvd.nist.gov/vuln/detail/CVE-2022-45934	external
https://git.kernel.org/pub/scm/linux/kernel/git/b…	external
https://access.redhat.com/security/cve/CVE-2022-48947	self
https://bugzilla.redhat.com/show_bug.cgi?id=2320770	external
https://www.cve.org/CVERecord?id=CVE-2022-48947	external
https://nvd.nist.gov/vuln/detail/CVE-2022-48947	external
https://lore.kernel.org/linux-cve-announce/202410…	external
https://access.redhat.com/security/cve/CVE-2022-49011	self
https://bugzilla.redhat.com/show_bug.cgi?id=2320778	external
https://www.cve.org/CVERecord?id=CVE-2022-49011	external
https://nvd.nist.gov/vuln/detail/CVE-2022-49011	external
https://lore.kernel.org/linux-cve-announce/202410…	external
https://access.redhat.com/security/cve/CVE-2023-3567	self
https://bugzilla.redhat.com/show_bug.cgi?id=2221463	external
https://www.cve.org/CVERecord?id=CVE-2023-3567	external
https://nvd.nist.gov/vuln/detail/CVE-2023-3567	external
https://www.spinics.net/lists/stable-commits/msg2…	external
https://access.redhat.com/security/cve/CVE-2023-4133	self
https://bugzilla.redhat.com/show_bug.cgi?id=2221702	external
https://www.cve.org/CVERecord?id=CVE-2023-4133	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4133	external
https://access.redhat.com/security/cve/CVE-2023-6040	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258013	external
https://www.cve.org/CVERecord?id=CVE-2023-6040	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6040	external
https://www.openwall.com/lists/oss-security/2024/…	external
https://access.redhat.com/security/cve/CVE-2023-6121	self
https://bugzilla.redhat.com/show_bug.cgi?id=2250043	external
https://www.cve.org/CVERecord?id=CVE-2023-6121	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6121	external
https://access.redhat.com/security/cve/CVE-2023-6176	self
https://bugzilla.redhat.com/show_bug.cgi?id=2219359	external
https://www.cve.org/CVERecord?id=CVE-2023-6176	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6176	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-6531	self
https://bugzilla.redhat.com/show_bug.cgi?id=2253034	external
https://www.cve.org/CVERecord?id=CVE-2023-6531	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6531	external
https://lore.kernel.org/all/c716c88321939156909cf…	external
https://access.redhat.com/security/cve/CVE-2023-6546	self
https://bugzilla.redhat.com/show_bug.cgi?id=2255498	external
https://www.cve.org/CVERecord?id=CVE-2023-6546	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6546	external
https://github.com/torvalds/linux/commit/3c4f8333…	external
https://www.zerodayinitiative.com/advisories/ZDI-…	external
https://access.redhat.com/security/cve/CVE-2023-6622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2253632	external
https://www.cve.org/CVERecord?id=CVE-2023-6622	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6622	external
https://github.com/torvalds/linux/commit/3701cd39…	external
https://access.redhat.com/security/cve/CVE-2023-6915	self
https://bugzilla.redhat.com/show_bug.cgi?id=2254982	external
https://www.cve.org/CVERecord?id=CVE-2023-6915	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6915	external
https://github.com/torvalds/linux/commit/af73483f…	external
https://access.redhat.com/security/cve/CVE-2023-6931	self
https://bugzilla.redhat.com/show_bug.cgi?id=2252731	external
https://www.cve.org/CVERecord?id=CVE-2023-6931	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6931	external
https://git.kernel.org/pub/scm/linux/kernel/git/s…	external
https://access.redhat.com/security/cve/CVE-2023-6932	self
https://bugzilla.redhat.com/show_bug.cgi?id=2255283	external
https://www.cve.org/CVERecord?id=CVE-2023-6932	external
https://nvd.nist.gov/vuln/detail/CVE-2023-6932	external
https://access.redhat.com/security/cve/CVE-2023-24023	self
https://bugzilla.redhat.com/show_bug.cgi?id=2254961	external
https://www.cve.org/CVERecord?id=CVE-2023-24023	external
https://nvd.nist.gov/vuln/detail/CVE-2023-24023	external
https://www.bluetooth.com/learn-about-bluetooth/k…	external
https://access.redhat.com/security/cve/CVE-2023-25775	self
https://bugzilla.redhat.com/show_bug.cgi?id=2231410	external
https://www.cve.org/CVERecord?id=CVE-2023-25775	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25775	external
https://www.intel.com/content/www/us/en/security-…	external
https://access.redhat.com/security/cve/CVE-2023-28464	self
https://bugzilla.redhat.com/show_bug.cgi?id=2177759	external
https://www.cve.org/CVERecord?id=CVE-2023-28464	external
https://nvd.nist.gov/vuln/detail/CVE-2023-28464	external
https://www.openwall.com/lists/oss-security/2023/…	external
https://access.redhat.com/security/cve/CVE-2023-28866	self
https://bugzilla.redhat.com/show_bug.cgi?id=2185519	external
https://www.cve.org/CVERecord?id=CVE-2023-28866	external
https://nvd.nist.gov/vuln/detail/CVE-2023-28866	external
https://git.kernel.org/pub/scm/linux/kernel/git/b…	external
https://lore.kernel.org/lkml/20230321015018.17596…	external
https://patchwork.kernel.org/project/bluetooth/pa…	external
https://access.redhat.com/security/cve/CVE-2023-31083	self
https://bugzilla.redhat.com/show_bug.cgi?id=2213132	external
https://www.cve.org/CVERecord?id=CVE-2023-31083	external
https://nvd.nist.gov/vuln/detail/CVE-2023-31083	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2023-37453	self
https://bugzilla.redhat.com/show_bug.cgi?id=2221039	external
https://www.cve.org/CVERecord?id=CVE-2023-37453	external
https://nvd.nist.gov/vuln/detail/CVE-2023-37453	external
https://access.redhat.com/security/cve/CVE-2023-39189	self
https://bugzilla.redhat.com/show_bug.cgi?id=2226777	external
https://www.cve.org/CVERecord?id=CVE-2023-39189	external
https://nvd.nist.gov/vuln/detail/CVE-2023-39189	external
https://access.redhat.com/security/cve/CVE-2023-39193	self
https://bugzilla.redhat.com/show_bug.cgi?id=2226787	external
https://www.cve.org/CVERecord?id=CVE-2023-39193	external
https://nvd.nist.gov/vuln/detail/CVE-2023-39193	external
https://www.zerodayinitiative.com/advisories/ZDI-…	external
https://access.redhat.com/security/cve/CVE-2023-39194	self
https://bugzilla.redhat.com/show_bug.cgi?id=2226788	external
https://www.cve.org/CVERecord?id=CVE-2023-39194	external
https://nvd.nist.gov/vuln/detail/CVE-2023-39194	external
https://www.zerodayinitiative.com/advisories/ZDI-…	external
https://access.redhat.com/security/cve/CVE-2023-39198	self
https://bugzilla.redhat.com/show_bug.cgi?id=2218332	external
https://www.cve.org/CVERecord?id=CVE-2023-39198	external
https://nvd.nist.gov/vuln/detail/CVE-2023-39198	external
https://access.redhat.com/security/cve/CVE-2023-42754	self
https://bugzilla.redhat.com/show_bug.cgi?id=2239845	external
https://www.cve.org/CVERecord?id=CVE-2023-42754	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42754	external
https://seclists.org/oss-sec/2023/q4/14	external
https://access.redhat.com/security/cve/CVE-2023-42756	self
https://bugzilla.redhat.com/show_bug.cgi?id=2239848	external
https://www.cve.org/CVERecord?id=CVE-2023-42756	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42756	external
https://seclists.org/oss-sec/2023/q3/242	external
https://access.redhat.com/security/cve/CVE-2023-45863	self
https://bugzilla.redhat.com/show_bug.cgi?id=2244720	external
https://www.cve.org/CVERecord?id=CVE-2023-45863	external
https://nvd.nist.gov/vuln/detail/CVE-2023-45863	external
https://access.redhat.com/security/cve/CVE-2023-46862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2246980	external
https://www.cve.org/CVERecord?id=CVE-2023-46862	external
https://nvd.nist.gov/vuln/detail/CVE-2023-46862	external
https://access.redhat.com/security/cve/CVE-2023-51043	self
https://bugzilla.redhat.com/show_bug.cgi?id=2260005	external
https://www.cve.org/CVERecord?id=CVE-2023-51043	external
https://nvd.nist.gov/vuln/detail/CVE-2023-51043	external
https://github.com/torvalds/linux/commit/4e076c73…	external
https://access.redhat.com/security/cve/CVE-2023-51779	self
https://bugzilla.redhat.com/show_bug.cgi?id=2256822	external
https://www.cve.org/CVERecord?id=CVE-2023-51779	external
https://nvd.nist.gov/vuln/detail/CVE-2023-51779	external
https://github.com/torvalds/linux/commit/2e07e834…	external
https://access.redhat.com/security/cve/CVE-2023-51780	self
https://bugzilla.redhat.com/show_bug.cgi?id=2257682	external
https://www.cve.org/CVERecord?id=CVE-2023-51780	external
https://nvd.nist.gov/vuln/detail/CVE-2023-51780	external
https://github.com/torvalds/linux/commit/24e90b9e…	external
https://access.redhat.com/security/cve/CVE-2023-52434	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265285	external
https://www.cve.org/CVERecord?id=CVE-2023-52434	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52434	external
https://git.kernel.org/pub/scm/linux/kernel/git/s…	external
https://git.kernel.org/pub/scm/linux/kernel/git/s…	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2023-52448	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265653	external
https://www.cve.org/CVERecord?id=CVE-2023-52448	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52448	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2023-52450	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265649	external
https://www.cve.org/CVERecord?id=CVE-2023-52450	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52450	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2023-52476	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267041	external
https://www.cve.org/CVERecord?id=CVE-2023-52476	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52476	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2023-52489	self
https://bugzilla.redhat.com/show_bug.cgi?id=2269189	external
https://www.cve.org/CVERecord?id=CVE-2023-52489	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52489	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2023-52522	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267795	external
https://www.cve.org/CVERecord?id=CVE-2023-52522	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52522	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52529	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267788	external
https://www.cve.org/CVERecord?id=CVE-2023-52529	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52529	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52574	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267750	external
https://www.cve.org/CVERecord?id=CVE-2023-52574	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52574	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52578	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267758	external
https://www.cve.org/CVERecord?id=CVE-2023-52578	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52578	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52580	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267760	external
https://www.cve.org/CVERecord?id=CVE-2023-52580	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52580	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52581	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267761	external
https://www.cve.org/CVERecord?id=CVE-2023-52581	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52581	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52597	self
https://bugzilla.redhat.com/show_bug.cgi?id=2268311	external
https://www.cve.org/CVERecord?id=CVE-2023-52597	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52597	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52610	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270080	external
https://www.cve.org/CVERecord?id=CVE-2023-52610	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52610	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2023-52620	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270883	external
https://www.cve.org/CVERecord?id=CVE-2023-52620	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52620	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2024-0565	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258518	external
https://www.cve.org/CVERecord?id=CVE-2024-0565	external
https://nvd.nist.gov/vuln/detail/CVE-2024-0565	external
https://www.spinics.net/lists/stable-commits/msg3…	external
https://access.redhat.com/security/cve/CVE-2024-0841	self
https://bugzilla.redhat.com/show_bug.cgi?id=2256490	external
https://www.cve.org/CVERecord?id=CVE-2024-0841	external
https://nvd.nist.gov/vuln/detail/CVE-2024-0841	external
https://access.redhat.com/security/cve/CVE-2024-1085	self
https://bugzilla.redhat.com/show_bug.cgi?id=2262127	external
https://www.cve.org/CVERecord?id=CVE-2024-1085	external
https://nvd.nist.gov/vuln/detail/CVE-2024-1085	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://kernel.dance/b1db244ffd041a49ecc9618e8feb…	external
https://access.redhat.com/security/cve/CVE-2024-1086	self
https://bugzilla.redhat.com/show_bug.cgi?id=2262126	external
https://www.cve.org/CVERecord?id=CVE-2024-1086	external
https://nvd.nist.gov/vuln/detail/CVE-2024-1086	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://kernel.dance/f342de4e2f33e0e39165d8639387…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2024-25744	self
https://bugzilla.redhat.com/show_bug.cgi?id=2263875	external
https://www.cve.org/CVERecord?id=CVE-2024-25744	external
https://nvd.nist.gov/vuln/detail/CVE-2024-25744	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2024-26582	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265518	external
https://www.cve.org/CVERecord?id=CVE-2024-26582	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26582	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26583	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265520	external
https://www.cve.org/CVERecord?id=CVE-2024-26583	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26583	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26584	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265519	external
https://www.cve.org/CVERecord?id=CVE-2024-26584	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26584	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26585	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265517	external
https://www.cve.org/CVERecord?id=CVE-2024-26585	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26585	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26586	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265645	external
https://www.cve.org/CVERecord?id=CVE-2024-26586	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26586	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26593	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265646	external
https://www.cve.org/CVERecord?id=CVE-2024-26593	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26593	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26602	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267695	external
https://www.cve.org/CVERecord?id=CVE-2024-26602	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26602	external
https://github.com/torvalds/linux/commit/944d5fe5…	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26609	self
https://bugzilla.redhat.com/show_bug.cgi?id=2269217	external
https://www.cve.org/CVERecord?id=CVE-2024-26609	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26609	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2024-26633	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270118	external
https://www.cve.org/CVERecord?id=CVE-2024-26633	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26633	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2024-26671	self
https://bugzilla.redhat.com/show_bug.cgi?id=2272811	external
https://www.cve.org/CVERecord?id=CVE-2024-26671	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26671	external
https://lore.kernel.org/linux-cve-announce/202404…	external

Acknowledgments

Duoming Zhou

Alon Zahavi

(IceSword Lab) Xingyuan Mo

Hillstone Network ZhengHan Wang

JSON

To clipboard

Loading 16.3 MB of JSON…

CVE-2023-31083 (GCVE-0-2023-31083)

Vulnerability from cvelistv5 – Published: 2023-04-24 00:00 – Updated: 2025-11-03 21:48

Summary

An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://lore.kernel.org/all/CA+UBctC3p49aTgzbVgkS…
https://security.netapp.com/advisory/ntap-2023092…
https://git.kernel.org/cgit/linux/kernel/git/torv…
https://bugzilla.suse.com/show_bug.cgi?id=1210780
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:48:24.068Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/all/CA+UBctC3p49aTgzbVgkSZ2+TQcqq4fPDO7yZitFT5uBPDeCO2g%40mail.gmail.com/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230929-0003/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c33663af9ad115f90c076a1828129a3fbadea98"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210780"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu-\u003eproto is set. A NULL pointer dereference may occur."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-25T00:41:51.289Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://lore.kernel.org/all/CA+UBctC3p49aTgzbVgkSZ2+TQcqq4fPDO7yZitFT5uBPDeCO2g%40mail.gmail.com/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230929-0003/"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c33663af9ad115f90c076a1828129a3fbadea98"
        },
        {
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1210780"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-31083",
    "datePublished": "2023-04-24T00:00:00.000Z",
    "dateReserved": "2023-04-24T00:00:00.000Z",
    "dateUpdated": "2025-11-03T21:48:24.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-3567 (GCVE-0-2023-3567)

Vulnerability from cvelistv5 – Published: 2023-07-24 15:19 – Updated: 2025-11-06 19:46

Title

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

Summary

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-416 - Use After Free

Assigner

redhat redhat root

References

14 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:0412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0439	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0448	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0575	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-3567	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2221463	issue-trackingx_refsource_REDHAT
https://www.spinics.net/lists/stable-commits/msg2…
http://packetstormsecurity.com/files/175072/Kerne…	x_transferred
http://packetstormsecurity.com/files/175963/Kerne…	x_transferred

Impacted products

13 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::realtime cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:4.18.0-372.87.1.el8_6 , < * (rpm) cpe:/o:redhat:rhev_hypervisor:4.4::el8 cpe:/a:redhat:rhel_eus:8.6::crb cpe:/o:redhat:rhel_eus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:4.18.0-477.43.1.el8_8 , < * (rpm) cpe:/o:redhat:rhel_eus:8.8::baseos cpe:/a:redhat:rhel_eus:8.8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::nfv cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::realtime cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.85.1.el9_0 , < * (rpm) cpe:/o:redhat:rhel_eus:9.0::baseos cpe:/a:redhat:rhel_eus:9.0::crb cpe:/a:redhat:rhel_eus:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	Unaffected: 0:5.14.0-70.85.1.rt21.156.el9_0 , < * (rpm) cpe:/a:redhat:rhel_eus:9.0::realtime cpe:/a:redhat:rhel_eus:9.0::nfv
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:5.14.0-284.48.1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.2::appstream cpe:/a:redhat:rhel_eus:9.2::crb cpe:/o:redhat:rhel_eus:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:5.14.0-284.48.1.rt14.333.el9_2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.2::nfv cpe:/a:redhat:rhel_eus:9.2::realtime
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-372.87.1.el8_6 , < * (rpm) cpe:/o:redhat:rhev_hypervisor:4.4::el8 cpe:/a:redhat:rhel_eus:8.6::crb cpe:/o:redhat:rhel_eus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-01-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:56.105Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
          },
          {
            "name": "RHSA-2024:0412",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0412"
          },
          {
            "name": "RHSA-2024:0431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0431"
          },
          {
            "name": "RHSA-2024:0432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0432"
          },
          {
            "name": "RHSA-2024:0439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0439"
          },
          {
            "name": "RHSA-2024:0448",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0448"
          },
          {
            "name": "RHSA-2024:0575",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0575"
          },
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-3567"
          },
          {
            "name": "RHBZ#2221463",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221463"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/stable-commits/msg285184.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::realtime",
            "cpe:/a:redhat:enterprise_linux:8::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhev_hypervisor:4.4::el8",
            "cpe:/a:redhat:rhel_eus:8.6::crb",
            "cpe:/o:redhat:rhel_eus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-372.87.1.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.8::baseos",
            "cpe:/a:redhat:rhel_eus:8.8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-477.43.1.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.0::baseos",
            "cpe:/a:redhat:rhel_eus:9.0::crb",
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.85.1.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::realtime",
            "cpe:/a:redhat:rhel_eus:9.0::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-70.85.1.rt21.156.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream",
            "cpe:/a:redhat:rhel_eus:9.2::crb",
            "cpe:/o:redhat:rhel_eus:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.48.1.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::nfv",
            "cpe:/a:redhat:rhel_eus:9.2::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-284.48.1.rt14.333.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhev_hypervisor:4.4::el8",
            "cpe:/a:redhat:rhel_eus:8.6::crb",
            "cpe:/o:redhat:rhel_eus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-372.87.1.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-01-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T19:46:34.822Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:0412",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0412"
        },
        {
          "name": "RHSA-2024:0431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0431"
        },
        {
          "name": "RHSA-2024:0432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0432"
        },
        {
          "name": "RHSA-2024:0439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0439"
        },
        {
          "name": "RHSA-2024:0448",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0448"
        },
        {
          "name": "RHSA-2024:0575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0575"
        },
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-3567"
        },
        {
          "name": "RHBZ#2221463",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221463"
        },
        {
          "url": "https://www.spinics.net/lists/stable-commits/msg285184.html"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-04-13T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-01-14T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-3567",
    "datePublished": "2023-07-24T15:19:19.795Z",
    "dateReserved": "2023-07-09T09:05:56.937Z",
    "dateUpdated": "2025-11-06T19:46:34.822Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-37453 (GCVE-0-2023-37453)

Vulnerability from cvelistv5 – Published: 2023-07-06 00:00 – Updated: 2025-05-05 15:56

Summary

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.

Severity

4.6 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:29 UTC

CWE

n/a
CWE-125 - Out-of-bounds Read

Assigner

mitre mitre root

References

7 references

URL	Tags
https://syzkaller.appspot.com/bug?extid=18996170f…
https://lore.kernel.org/all/000000000000c0ffe505f…
https://lore.kernel.org/all/000000000000e56434059…
https://git.kernel.org/cgit/linux/kernel/git/torv…
https://git.kernel.org/cgit/linux/kernel/git/torv…
https://git.kernel.org/cgit/linux/kernel/git/torv…
https://git.kernel.org/cgit/linux/kernel/git/torv…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:16:29.576Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://syzkaller.appspot.com/bug?extid=18996170f8096c6174d0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/all/000000000000c0ffe505fe86c9ca%40google.com/T/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/all/000000000000e56434059580f86e%40google.com/T/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e4c574225cc5a0553115e5eb5787d1474db5b0f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=85d07c55621676d47d873d2749b88f783cd4d5a1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de28e469da75359a2bb8cd8778b78aa64b1be1f4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff33299ec8bb80cdcc073ad9c506bd79bb2ed20b"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "HIGH",
              "baseScore": 4.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-37453",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:29:53.552747Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T15:56:39.373Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-25T00:41:40.673Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://syzkaller.appspot.com/bug?extid=18996170f8096c6174d0"
        },
        {
          "url": "https://lore.kernel.org/all/000000000000c0ffe505fe86c9ca%40google.com/T/"
        },
        {
          "url": "https://lore.kernel.org/all/000000000000e56434059580f86e%40google.com/T/"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e4c574225cc5a0553115e5eb5787d1474db5b0f"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=85d07c55621676d47d873d2749b88f783cd4d5a1"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de28e469da75359a2bb8cd8778b78aa64b1be1f4"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff33299ec8bb80cdcc073ad9c506bd79bb2ed20b"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-37453",
    "datePublished": "2023-07-06T00:00:00.000Z",
    "dateReserved": "2023-07-06T00:00:00.000Z",
    "dateUpdated": "2025-05-05T15:56:39.373Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-39189 (GCVE-0-2023-39189)

Vulnerability from cvelistv5 – Published: 2023-10-09 17:57 – Updated: 2025-11-06 19:47

Title

Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()

Summary

Severity

5.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-39189	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2226777	issue-trackingx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2024…	x_transferred

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::nfv cpe:/a:redhat:enterprise_linux:8::realtime
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::realtime cpe:/a:redhat:enterprise_linux:9::nfv
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-08-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T18:02:06.808Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-39189"
          },
          {
            "name": "RHBZ#2226777",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2226777"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::nfv",
            "cpe:/a:redhat:enterprise_linux:8::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-08-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T19:47:40.196Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-39189"
        },
        {
          "name": "RHBZ#2226777",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2226777"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-07-25T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-08-30T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()",
      "workarounds": [
        {
          "lang": "en",
          "value": "This flaw can be mitigated by preventing the affected Passive OS Fingerprinting match module (`xt_osf`) from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278."
        }
      ],
      "x_redhatCweChain": "CWE-125: Out-of-bounds Read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-39189",
    "datePublished": "2023-10-09T17:57:44.776Z",
    "dateReserved": "2023-07-25T16:01:14.835Z",
    "dateUpdated": "2025-11-06T19:47:40.196Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-39193 (GCVE-0-2023-39193)

Vulnerability from cvelistv5 – Published: 2023-10-09 17:57 – Updated: 2025-11-06 19:47

Title

Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()

Summary

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-29 19:59 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

redhat redhat root

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-39193	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2226787	issue-trackingx_refsource_REDHAT
https://www.zerodayinitiative.com/advisories/ZDI-…
https://lists.debian.org/debian-lts-announce/2024…	x_transferred

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::realtime cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::nfv cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::realtime cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-09-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T18:02:06.556Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-39193"
          },
          {
            "name": "RHBZ#2226787",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2226787"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-18866/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-39193",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-29T19:59:34.680575Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-29T20:00:52.526Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::realtime",
            "cpe:/a:redhat:enterprise_linux:8::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T19:47:45.744Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-39193"
        },
        {
          "name": "RHBZ#2226787",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2226787"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-18866/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-07-25T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-09-29T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()",
      "workarounds": [
        {
          "lang": "en",
          "value": "This flaw can be mitigated by preventing the affected `xt_sctp` kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278."
        }
      ],
      "x_redhatCweChain": "CWE-125: Out-of-bounds Read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-39193",
    "datePublished": "2023-10-09T17:57:49.676Z",
    "dateReserved": "2023-07-25T16:01:14.836Z",
    "dateUpdated": "2025-11-06T19:47:45.744Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-39194 (GCVE-0-2023-39194)

Vulnerability from cvelistv5 – Published: 2023-10-09 17:57 – Updated: 2025-11-06 20:01

Title

Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()

Summary

Severity

3.2 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

CWE

CWE-125 - Out-of-bounds Read

Assigner

redhat redhat root

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-39194	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2226788	issue-trackingx_refsource_REDHAT
https://www.zerodayinitiative.com/advisories/ZDI-…
https://lists.debian.org/debian-lts-announce/2024…	x_transferred

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::realtime cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::realtime cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::nfv
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-09-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T18:02:05.299Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-39194"
          },
          {
            "name": "RHBZ#2226788",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2226788"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-18111/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::realtime",
            "cpe:/a:redhat:enterprise_linux:8::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T20:01:52.681Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-39194"
        },
        {
          "name": "RHBZ#2226788",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2226788"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-18111/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-07-25T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-09-29T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-125: Out-of-bounds Read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-39194",
    "datePublished": "2023-10-09T17:57:50.354Z",
    "dateReserved": "2023-07-25T16:01:14.836Z",
    "dateUpdated": "2025-11-06T20:01:52.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-39198 (GCVE-0-2023-39198)

Vulnerability from cvelistv5 – Published: 2023-11-09 19:15 – Updated: 2026-03-24 11:28

Title

Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()

Summary

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-01 03:55 UTC

CWE

CWE-416 - Use After Free

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-39198	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2218332	issue-trackingx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2024…	x_transferred

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::nfv cpe:/a:redhat:enterprise_linux:8::realtime
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::realtime cpe:/a:redhat:enterprise_linux:9::nfv cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-08-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-39198",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-01T03:55:52.570322Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-01T13:53:12.378Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T18:02:05.368Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-39198"
          },
          {
            "name": "RHBZ#2218332",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218332"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::nfv",
            "cpe:/a:redhat:enterprise_linux:8::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-08-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-24T11:28:17.016Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-39198"
        },
        {
          "name": "RHBZ#2218332",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218332"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-06-28T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-08-17T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-39198",
    "datePublished": "2023-11-09T19:15:47.605Z",
    "dateReserved": "2023-07-25T17:04:34.810Z",
    "dateUpdated": "2026-03-24T11:28:17.016Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-4133 (GCVE-0-2023-4133)

Vulnerability from cvelistv5 – Published: 2023-08-03 14:32 – Updated: 2025-11-06 19:46

Title

Kernel: cxgb4: use-after-free in ch_flower_stats_cb()

Summary

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-26 21:51 UTC

CWE

CWE-416 - Use After Free

Assigner

redhat redhat root

References

5 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4133	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2221702	issue-trackingx_refsource_REDHAT

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::realtime cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::nfv cpe:/a:redhat:enterprise_linux:9::realtime
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-04-15 00:00

Credits

Red Hat would like to thank Duoming Zhou for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:17:12.136Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-4133"
          },
          {
            "name": "RHBZ#2221702",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221702"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4133",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-26T21:51:04.961885Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-27T21:11:13.168Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::realtime",
            "cpe:/a:redhat:enterprise_linux:8::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Duoming Zhou for reporting this issue."
        }
      ],
      "datePublic": "2023-04-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T19:46:38.846Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-4133"
        },
        {
          "name": "RHBZ#2221702",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2221702"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-07-10T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-04-15T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: cxgb4: use-after-free in ch_flower_stats_cb()",
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-4133",
    "datePublished": "2023-08-03T14:32:12.421Z",
    "dateReserved": "2023-08-03T09:30:09.992Z",
    "dateUpdated": "2025-11-06T19:46:38.846Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-42754 (GCVE-0-2023-42754)

Vulnerability from cvelistv5 – Published: 2023-10-05 18:25 – Updated: 2025-11-06 19:47

Title

Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()

Summary

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476 - NULL Pointer Dereference

Assigner

redhat redhat root

References

10 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2950	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3138	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-42754	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2239845	issue-trackingx_refsource_REDHAT
https://seclists.org/oss-sec/2023/q4/14
https://lists.debian.org/debian-lts-announce/2024…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.rt7.342.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::nfv cpe:/a:redhat:enterprise_linux:8::realtime
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::realtime cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::nfv cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-09-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:30:24.420Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "name": "RHSA-2024:2950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2950"
          },
          {
            "name": "RHSA-2024:3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3138"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-42754"
          },
          {
            "name": "RHBZ#2239845",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2239845"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://seclists.org/oss-sec/2023/q4/14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::nfv",
            "cpe:/a:redhat:enterprise_linux:8::realtime"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.rt7.342.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.18.0-553.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::nfv",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-09-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T19:47:52.634Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "name": "RHSA-2024:2950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2950"
        },
        {
          "name": "RHSA-2024:3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3138"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-42754"
        },
        {
          "name": "RHBZ#2239845",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2239845"
        },
        {
          "url": "https://seclists.org/oss-sec/2023/q4/14"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-09-13T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-09-17T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-476: NULL Pointer Dereference"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-42754",
    "datePublished": "2023-10-05T18:25:22.372Z",
    "dateReserved": "2023-09-13T11:03:47.962Z",
    "dateUpdated": "2025-11-06T19:47:52.634Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-42756 (GCVE-0-2023-42756)

Vulnerability from cvelistv5 – Published: 2023-09-28 13:55 – Updated: 2025-11-06 19:47

Title

Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap

Summary

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-27 20:32 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

redhat redhat root

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-42756	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2239848	issue-trackingx_refsource_REDHAT
https://seclists.org/oss-sec/2023/q3/242
https://lists.debian.org/debian-lts-announce/2023…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred

Impacted products

5 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-427.13.1.el9_4 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::realtime cpe:/a:redhat:enterprise_linux:9::nfv
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2023-09-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:30:24.501Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2394"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-42756"
          },
          {
            "name": "RHBZ#2239848",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2239848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://seclists.org/oss-sec/2023/q3/242"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-42756",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-27T20:32:17.539570Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-27T20:48:48.574Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::realtime",
            "cpe:/a:redhat:enterprise_linux:9::nfv"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:5.14.0-427.13.1.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "kernel-rt",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-09-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T19:47:59.667Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2394"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-42756"
        },
        {
          "name": "RHBZ#2239848",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2239848"
        },
        {
          "url": "https://seclists.org/oss-sec/2023/q3/242"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-09-20T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-09-27T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-42756",
    "datePublished": "2023-09-28T13:55:37.430Z",
    "dateReserved": "2023-09-13T11:03:47.962Z",
    "dateUpdated": "2025-11-06T19:47:59.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2024_2394

CVE-2023-31083 (GCVE-0-2023-31083)

CVE-2023-3567 (GCVE-0-2023-3567)

CVE-2023-37453 (GCVE-0-2023-37453)

CVE-2023-39189 (GCVE-0-2023-39189)

CVE-2023-39193 (GCVE-0-2023-39193)

CVE-2023-39194 (GCVE-0-2023-39194)

CVE-2023-39198 (GCVE-0-2023-39198)

CVE-2023-4133 (GCVE-0-2023-4133)

CVE-2023-42754 (GCVE-0-2023-42754)

CVE-2023-42756 (GCVE-0-2023-42756)

Tags

Sightings

Nomenclature