A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 17, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 14, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Apr 14, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 17, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade dtb-alUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-syms-rtUpgrade dtb-zteUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-develUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debug | May 10, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade linux-riscv-5.15Upgrade linux-azure-fdeUpgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-gcp-5.15Upgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-oracle-5.15Upgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-nvidiaUpgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-gke-5.15Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-iotUpgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-azure-5.4 | Nov 19, 2024 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub