A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 17, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 14, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Apr 14, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 17, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-zteUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade kselftests-kmp-defaultUpgrade kernel-preemptUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade dtb-appleUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-develUpgrade dtb-marvellUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-syms-azure | May 10, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-hwe-5.4Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linux-azure-fdeUpgrade linux-raspi-5.4Upgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-gke-5.15Upgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-ibmUpgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-hwe-5.15Upgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-ibm-5.4Upgrade linux | Nov 19, 2024 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub