A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 17, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 14, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Apr 14, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 17, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-preemptUpgrade dtb-alUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-zteUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-altera | May 10, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-gke-5.15Upgrade linux-fipsUpgrade linux-gkeUpgrade linux-azure-fdeUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-lowlatencyUpgrade linux-hwe-5.4Upgrade linux-realtimeUpgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-aws-5.15Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-iot | Nov 19, 2024 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub