An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-5.15.117-72.142Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-devel | Jun 30, 2023 | May 31, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | May 31, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | May 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade python3-perf | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Aug 9, 2023 | May 31, 2023 |
| Oracle_linux | — | Upgrade kernel-uek-firmwareUpgrade kernel-uek-develUpgrade kernel-uekUpgrade kernel-uek-docUpgrade kernel-uek-debug-develUpgrade kernel-uek-debug | Jul 4, 2023 | May 31, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1175-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1129-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-223-genericUpgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle | Mar 19, 2024 | May 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub