Out-of-bounds write in kernel
Priority LOW 36CWE-131Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-131 and the CVSS impact.
Summary
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0044 38th percentileScored 2026-11-07
Fix Fixed Red Hat: 28 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | kernel | kernel 6.0.12 | — | No fix listed | CNA |
- kernel Vendor— Affected kernel 6.0.12 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.9.0 – 4.9.337; 4.14.0 – 4.14.302; 4.19.0 – 4.19.269; 5.4.0 – 5.4.228; 5.10.0 – 5.10.162; 5.15.0 – 5.15.86; 6.0.0 – 6.0.11 | Vulnerable | Linux |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 4.9.0 – 4.9.337; 4.14.0 – 4.14.302; 4.19.0 – 4.19.269; 5.4.0 – 5.4.228; 5.10.0 – 5.10.162; 5.15.0 – 5.15.86; 6.0.0 – 6.0.11 Vulnerable ·Linux
Remediation
Red Hat 28 advisories
- RHSA-2023:3491 Released 2023-06-06 · Red Hat rating ImportantRed Hat Virtualization Host 4.4.z SP 1 security update
- Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.3-202306050942_8.6, redhat-virtualization-host-image-update-4.5.3-202306050942_8.6
- RHSA-2023:3431 Released 2023-06-05 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) kpatch-patch-4_18_0-372_36_1-1-6.el8_6, kpatch-patch-4_18_0-372_40_1-1-6.el8_6, kpatch-patch-4_18_0-372_41_1-1-5.el8_6 +3
- RHSA-2023:3388 Released 2023-05-31 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.57.1.el8_6
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.57.1.el8_6, kernel-4.18.0-372.57.1.el8_6, kernel-abi-stablelists-4.18.0-372.57.1.el8_6 +19
- Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.57.1.el8_6, perf-4.18.0-372.57.1.el8_6
Show 25 more Red Hat advisories
- RHSA-2023:1822 Released 2023-04-18 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server (v. 6 ELS) kernel-2.6.32-754.50.1.el6, kernel-abi-whitelists-2.6.32-754.50.1.el6, kernel-debug-2.6.32-754.50.1.el6 +7
- Red Hat Enterprise Linux Server Optional (v. 6 ELS) python-perf-2.6.32-754.50.1.el6
- RHSA-2023:1706 Released 2023-04-11 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.107.1.el7, kernel-abi-whitelists-3.10.0-693.107.1.el7, kernel-debug-3.10.0-693.107.1.el7 +7
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.107.1.el7
- RHSA-2023:1705 Released 2023-04-11 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 7.6) bpftool-3.10.0-957.100.1.el7, kernel-3.10.0-957.100.1.el7, kernel-abi-whitelists-3.10.0-957.100.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.100.1.el7
- RHSA-2023:1659 Released 2023-04-05 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-425_10_1-1-4.el8_7, kpatch-patch-4_18_0-425_13_1-1-2.el8_7, kpatch-patch-4_18_0-425_3_1-1-6.el8
- RHSA-2023:1566 Released 2023-04-04 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-425.19.2.el8_7
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-425.19.2.el8_7, kernel-4.18.0-425.19.2.el8_7, kernel-abi-stablelists-4.18.0-425.19.2.el8_7 +19
- RHSA-2023:1584 Released 2023-04-04 · Red Hat rating Importantkernel-rt security and bug fix update
- Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-core-4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-debug-4.18.0-425.19.2.rt7.230.el8_7 +9
- Red Hat Enterprise Linux for Real Time (v. 8) kernel-rt-4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-core-4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-debug-4.18.0-425.19.2.rt7.230.el8_7 +7
- RHSA-2023:1435 Released 2023-03-23 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) kpatch-patch-5_14_0-70_22_1-1-6.el9_0, kpatch-patch-5_14_0-70_26_1-1-5.el9_0, kpatch-patch-5_14_0-70_30_1-1-3.el9_0 +2
- RHSA-2023:1251 Released 2023-03-15 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS EUS (v.8.4) kpatch-patch-4_18_0-305_62_1-1-5.el8_4, kpatch-patch-4_18_0-305_65_1-1-4.el8_4, kpatch-patch-4_18_0-305_71_1-1-3.el8_4 +2
- RHSA-2023:1221 Released 2023-03-14 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux BaseOS EUS (v.8.4) bpftool-4.18.0-305.82.1.el8_4, kernel-4.18.0-305.82.1.el8_4, kernel-abi-stablelists-4.18.0-305.82.1.el8_4 +19
- Red Hat Enterprise Linux CRB EUS (v.8.4) kernel-tools-libs-devel-4.18.0-305.82.1.el8_4
- RHSA-2023:1220 Released 2023-03-14 · Red Hat rating Importantkernel-rt security and bug fix update
- Red Hat Enterprise Linux NFV EUS (v.8.4) kernel-rt-4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-core-4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-debug-4.18.0-305.82.1.rt7.154.el8_4 +9
- Red Hat Enterprise Linux RT EUS (v.8.4) kernel-rt-4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-core-4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-debug-4.18.0-305.82.1.rt7.154.el8_4 +7
- RHSA-2023:1202 Released 2023-03-14 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat CodeReady Linux Builder EUS (v.9.0) kernel-tools-libs-devel-5.14.0-70.49.1.el9_0
- Red Hat Enterprise Linux AppStream EUS (v.9.0) kernel-debug-devel-5.14.0-70.49.1.el9_0, kernel-debug-devel-matched-5.14.0-70.49.1.el9_0, kernel-devel-5.14.0-70.49.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) bpftool-5.14.0-70.49.1.el9_0, kernel-5.14.0-70.49.1.el9_0, kernel-abi-stablelists-5.14.0-70.49.1.el9_0 +14
- RHSA-2023:1203 Released 2023-03-14 · Red Hat rating Importantkernel-rt security and bug fix update
- Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt-5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-core-5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-debug-5.14.0-70.49.1.rt21.120.el9_0 +7
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt-5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-core-5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-debug-5.14.0-70.49.1.rt21.120.el9_0 +9
- RHSA-2023:1109 Released 2023-03-07 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.100.1.el8_2, kernel-4.18.0-193.100.1.el8_2, kernel-abi-whitelists-4.18.0-193.100.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) bpftool-4.18.0-193.100.1.el8_2, kernel-4.18.0-193.100.1.el8_2, kernel-abi-whitelists-4.18.0-193.100.1.el8_2 +14
- Red Hat Enterprise Linux BaseOS TUS (v. 8.2) bpftool-4.18.0-193.100.1.el8_2, kernel-4.18.0-193.100.1.el8_2, kernel-abi-whitelists-4.18.0-193.100.1.el8_2 +14
- RHSA-2023:1110 Released 2023-03-07 · Red Hat rating Importantkernel-rt security and bug fix update
- Red Hat Enterprise Linux Real Time TUS (v. 8.2) kernel-rt-4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-core-4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-debug-4.18.0-193.100.1.rt13.151.el8_2 +7
- Red Hat Enterprise Linux Real Time for NFV TUS (v. 8.2) kernel-rt-4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-core-4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-debug-4.18.0-193.100.1.rt13.151.el8_2 +9
- RHSA-2023:1103 Released 2023-03-07 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) kpatch-patch-4_18_0-193_90_1-1-4.el8_2, kpatch-patch-4_18_0-193_91_1-1-4.el8_2, kpatch-patch-4_18_0-193_93_1-1-3.el8_2 +2
- RHSA-2023:1091 Released 2023-03-07 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.88.1.el7, kernel-3.10.0-1160.88.1.el7, kernel-abi-whitelists-3.10.0-1160.88.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.88.1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.88.1.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.88.1.el7, kernel-3.10.0-1160.88.1.el7, kernel-abi-whitelists-3.10.0-1160.88.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.88.1.el7, kernel-tools-libs-devel-3.10.0-1160.88.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.88.1.el7, kernel-3.10.0-1160.88.1.el7, kernel-abi-whitelists-3.10.0-1160.88.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.88.1.el7
- RHSA-2023:1092 Released 2023-03-07 · Red Hat rating Importantkernel-rt security and bug fix update
- Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-debug-3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-debug-devel-3.10.0-1160.88.1.rt56.1233.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-debug-3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-debug-devel-3.10.0-1160.88.1.rt56.1233.el7 +7
- RHSA-2023:1101 Released 2023-03-07 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux Server (v. 7) kpatch-patch-3_10_0-1160_76_1-1-3.el7, kpatch-patch-3_10_0-1160_80_1-1-2.el7, kpatch-patch-3_10_0-1160_81_1-1-2.el7 +1
- RHSA-2023:1008 Released 2023-02-28 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS (v. 9) kpatch-patch-5_14_0-162_12_1-1-1.el9_1, kpatch-patch-5_14_0-162_6_1-1-2.el9_1
- RHSA-2023:0979 Released 2023-02-28 · Red Hat rating Importantkernel-rt security and bug fix update
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-core-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-5.14.0-162.18.1.rt21.181.el9_1 +7
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-core-5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-5.14.0-162.18.1.rt21.181.el9_1 +9
- RHSA-2023:0951 Released 2023-02-28 · Red Hat rating Importantkernel security and bug fix update
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-162.18.1.el9_1
- Red Hat Enterprise Linux AppStream (v. 9) kernel-debug-devel-5.14.0-162.18.1.el9_1, kernel-debug-devel-matched-5.14.0-162.18.1.el9_1, kernel-devel-5.14.0-162.18.1.el9_1 +5
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-5.14.0-162.18.1.el9_1, kernel-5.14.0-162.18.1.el9_1, kernel-abi-stablelists-5.14.0-162.18.1.el9_1 +14
- RHSA-2023:0944 Released 2023-02-28 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.71.1.el7, kernel-3.10.0-1062.71.1.el7, kernel-abi-whitelists-3.10.0-1062.71.1.el7 +8
- Red Hat Enterprise Linux Server E4S (v. 7.7) bpftool-3.10.0-1062.71.1.el7, kernel-3.10.0-1062.71.1.el7, kernel-abi-whitelists-3.10.0-1062.71.1.el7 +9
- Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.71.1.el7
- Red Hat Enterprise Linux Server Optional E4S (v. 7.7) kernel-debug-devel-3.10.0-1062.71.1.el7, kernel-tools-libs-devel-3.10.0-1062.71.1.el7
- Red Hat Enterprise Linux Server Optional TUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.71.1.el7
- Red Hat Enterprise Linux Server TUS (v. 7.7) bpftool-3.10.0-1062.71.1.el7, kernel-3.10.0-1062.71.1.el7, kernel-abi-whitelists-3.10.0-1062.71.1.el7 +8
- RHSA-2023:0945 Released 2023-02-28 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux Server E4S (v. 7.7) kpatch-patch-3_10_0-1062_68_1-1-1.el7, kpatch-patch-3_10_0-1062_70_1-1-1.el7
- RHSA-2023:0856 Released 2023-02-21 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS E4S (v. 8.1) bpftool-4.18.0-147.80.1.el8_1, kernel-4.18.0-147.80.1.el8_1, kernel-abi-whitelists-4.18.0-147.80.1.el8_1 +14
- RHSA-2023:0858 Released 2023-02-21 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS E4S (v. 8.1) kpatch-patch-4_18_0-147_70_1-1-3.el8_1, kpatch-patch-4_18_0-147_74_1-1-3.el8_1, kpatch-patch-4_18_0-147_76_1-1-2.el8_1 +2
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat CodeReady Linux Builder (v. 8) | Fixed | RHSA-2023:1566 |
| Red Hat CodeReady Linux Builder (v. 9) | Fixed | RHSA-2023:0951 |
| Red Hat CodeReady Linux Builder EUS (v.8.6) | Fixed | RHSA-2023:3388 |
| Red Hat CodeReady Linux Builder EUS (v.9.0) | Fixed | RHSA-2023:1202 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2023:0951 |
| Red Hat Enterprise Linux AppStream EUS (v.9.0) | Fixed | RHSA-2023:1202 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2023:1566, RHSA-2023:1659 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2023:0951, RHSA-2023:1008 |
| Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | Fixed | RHSA-2023:1109 |
| Red Hat Enterprise Linux BaseOS E4S (v. 8.1) | Fixed | RHSA-2023:0856, RHSA-2023:0858 |
| Red Hat Enterprise Linux BaseOS E4S (v. 8.2) | Fixed | RHSA-2023:1103, RHSA-2023:1109 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.4) | Fixed | RHSA-2023:1221, RHSA-2023:1251 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.6) | Fixed | RHSA-2023:3388, RHSA-2023:3431 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.0) | Fixed | RHSA-2023:1202, RHSA-2023:1435 |
| Red Hat Enterprise Linux BaseOS TUS (v. 8.2) | Fixed | RHSA-2023:1109 |
| Red Hat Enterprise Linux CRB EUS (v.8.4) | Fixed | RHSA-2023:1221 |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2023:1091 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2023:1091 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2023:1091 |
| Red Hat Enterprise Linux NFV EUS (v.8.4) | Fixed | RHSA-2023:1220 |
| Red Hat Enterprise Linux RT EUS (v.8.4) | Fixed | RHSA-2023:1220 |
| Red Hat Enterprise Linux Real Time (v. 9) | Fixed | RHSA-2023:0979 |
| Red Hat Enterprise Linux Real Time EUS (v.9.0) | Fixed | RHSA-2023:1203 |
| Red Hat Enterprise Linux Real Time TUS (v. 8.2) | Fixed | RHSA-2023:1110 |
| Red Hat Enterprise Linux Real Time for NFV (v. 8) | Fixed | RHSA-2023:1584 |
| Red Hat Enterprise Linux Real Time for NFV (v. 9) | Fixed | RHSA-2023:0979 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) | Fixed | RHSA-2023:1203 |
| Red Hat Enterprise Linux Real Time for NFV TUS (v. 8.2) | Fixed | RHSA-2023:1110 |
| Red Hat Enterprise Linux Server (v. 6 ELS) | Fixed | RHSA-2023:1822 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2023:1091, RHSA-2023:1101 |
| Red Hat Enterprise Linux Server AUS (v. 7.4) | Fixed | RHSA-2023:1706 |
| Red Hat Enterprise Linux Server AUS (v. 7.6) | Fixed | RHSA-2023:1705 |
| Red Hat Enterprise Linux Server AUS (v. 7.7) | Fixed | RHSA-2023:0944 |
| Red Hat Enterprise Linux Server E4S (v. 7.7) | Fixed | RHSA-2023:0944, RHSA-2023:0945 |
| Red Hat Enterprise Linux Server Optional (v. 6 ELS) | Fixed | RHSA-2023:1822 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2023:1091 |
| Red Hat Enterprise Linux Server Optional AUS (v. 7.4) | Fixed | RHSA-2023:1706 |
| Red Hat Enterprise Linux Server Optional AUS (v. 7.6) | Fixed | RHSA-2023:1705 |
| Red Hat Enterprise Linux Server Optional AUS (v. 7.7) | Fixed | RHSA-2023:0944 |
| Red Hat Enterprise Linux Server Optional E4S (v. 7.7) | Fixed | RHSA-2023:0944 |
| Red Hat Enterprise Linux Server Optional TUS (v. 7.7) | Fixed | RHSA-2023:0944 |
| Red Hat Enterprise Linux Server TUS (v. 7.7) | Fixed | RHSA-2023:0944 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2023:1091 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2023:1091 |
| Red Hat Enterprise Linux for Real Time (v. 7) | Fixed | RHSA-2023:1092 |
| Red Hat Enterprise Linux for Real Time (v. 8) | Fixed | RHSA-2023:1584 |
| Red Hat Enterprise Linux for Real Time for NFV (v. 7) | Fixed | RHSA-2023:1092 |
| Red Hat Virtualization 4 Hypervisor for RHEL 8 | Fixed | RHSA-2023:3388, RHSA-2023:3491 |
Not affected: 1 product
- RHEL 8-based RHEV-H for RHEV 4 (build requirements)
Timeline
- 2026-10-02 Threatist record created from CVE-2022-4378
- 2026-10-03 Alias added: GHSA-v2c8-m646-2q5c
References
Advisory 4
- https://bugzilla.redhat.com/show_bug.cgi?id=2152548
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-avoid-integer-type-confusion-in-get_proc_long.patch
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-proc_skip_spaces-shouldn-t-think-it-is-working-on-c-strings.patch
- https://seclists.org/oss-sec/2022/q4/178
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2022-4378 · CVE Program
- CVE-2022-4378 · NVD
- FIRST EPSS
- GHSA-v2c8-m646-2q5c · GitHub Advisory Database · CC BY 4.0
- CVE-2022-4378 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences