An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.318-240.529Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.117-72.142Upgrade bpftoolUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.184-174.730Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools | Jun 30, 2023 | May 31, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | May 31, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | May 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Aug 9, 2023 | May 31, 2023 |
| Oracle_linux | — | Upgrade kernel-uek-develUpgrade kernel-uekUpgrade kernel-uek-firmwareUpgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernel-uek-debug | Jul 4, 2023 | May 31, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-4.15.0-223-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1129-awsUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1175-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-gcpUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-252-lowlatency | Mar 19, 2024 | May 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub