An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.117-72.142Upgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade bpftool | Jun 30, 2023 | May 31, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | May 31, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | May 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-devel | Jan 10, 2024 | May 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Aug 9, 2023 | May 31, 2023 |
| Oracle_linux | — | Upgrade kernel-uek-debug-develUpgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-firmware | Jul 4, 2023 | May 31, 2023 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-4.15.0-1175-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1129-awsUpgrade linux-image-genericUpgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-223-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-252-generic | Mar 19, 2024 | May 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub