{"schema_version":"1.7.2","id":"OESA-2023-1437","modified":"2023-07-21T11:05:33Z","published":"2023-07-21T11:05:33Z","upstream":["CVE-2023-3090","CVE-2023-3117","CVE-2023-31248","CVE-2023-3220","CVE-2023-3338","CVE-2023-3358"],"summary":"kernel security update","details":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nA heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.\n\nThe out-of-bounds write is caused by missing skb-\u0026gt;cb  initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.\n\n\nWe recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.\n\n(CVE-2023-3090)\n\nA use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)\n\nLinux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace(CVE-2023-31248)\n\nAn issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)\n\nA flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)\n\nA null pointer dereference was found in the Linux kernel\u0026apos;s Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)","affected":[{"package":{"ecosystem":"openEuler:22.03-LTS-SP2","name":"kernel","purl":"pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS-SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-153.19.0.95.oe2203sp2"}]}],"ecosystem_specific":{"aarch64":["kernel-tools-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","python3-perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","perf-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","bpftool-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","bpftool-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","python3-perf-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-debugsource-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-devel-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-tools-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-headers-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-source-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm","kernel-tools-devel-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm"],"src":["kernel-5.10.0-153.19.0.95.oe2203sp2.src.rpm"],"x86_64":["kernel-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","bpftool-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-source-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","python3-perf-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-tools-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","bpftool-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-debugsource-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-tools-devel-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","perf-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-tools-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-headers-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","python3-perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm","kernel-devel-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1437"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3090"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3117"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31248"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3220"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3338"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3358"}],"database_specific":{"severity":"High"}}