A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 17, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 14, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 10, 2024 | Apr 14, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 17, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-macrosUpgrade dtb-appleUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade dtb-zteUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade reiserfs-kmp-azure | May 10, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-ibm-5.4Upgrade linux-iotUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-gkeUpgrade linux-azure-fdeUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-aws-5.4Upgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-gke-5.15 | Nov 19, 2024 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub