An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernelUpgrade kernel-livepatch-5.15.117-72.142Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf | Jun 30, 2023 | May 31, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | May 31, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | May 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade python-perf | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Aug 9, 2023 | May 31, 2023 |
| Oracle_linux | — | Upgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernel-uek-debugUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-devel | Jul 4, 2023 | May 31, 2023 |
| Ubuntu | — | Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-oemUpgrade linux-image-4.15.0-223-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1129-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1175-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1160-gcp | Mar 19, 2024 | May 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub