CLSA-2023-1686651204
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1686651204.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2023-1686651204
- Upstream
- Published
- 2023-06-13T10:13:28Z
- Modified
- 2026-05-27T11:36:14.067743853Z
- Summary
- kernel: Fix of 25 CVEs
- Details
-
- cgroup: Use open-time cgroup namespace for process migration perm checks {CVE-2021-4197}
- cgroup: Use open-time credentials for process migraton perm checks {CVE-2021-4197}
- vt: drop old FONT ioctls {CVE-2021-33656}
- fbmem: Check virtual screen sizes in fbsetvar() {CVE-2021-33655}
- fbcon: Prevent that screen size is smaller than font size {CVE-2021-33655}
- fbcon: Disallow setting font bigger than screen size {CVE-2021-33655}
- KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456}
- net: usb: ax88179_178a: Fix packet receiving
- ipv4: make exception cache less predictible {CVE-2021-20322}
- ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322}
- ipv6: make exception cache less predictible {CVE-2021-20322}
- ipv6: use siphash in rt6exceptionhash() {CVE-2021-20322}
- ipv6: use jhash2() in rt6exceptionhash()
- psi: Fix uaf issue when psi trigger is destroyed while being polled {CVE-2022-2938}
- psi: fix possible trigger missing in the window
- cgroup: Allocate cgroupfilectx for kernfsopenfile->priv
- cgroup: make per-cgroup pressure stall tracking configurable
- netfilter: nftablesoffload: incorrect flow offload action array size {CVE-2022-25636}
- netfilter: nftablesoffload: KASAN slab-out-of-bounds Read in nftflowrulecreate
- Bluetooth: L2CAP: Fix l2capglobalchanbypsm {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM {CVE-2022-42896}
- devlink: Fix use-after-free after a failed reload {CVE-2022-3625}
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}
- net/sched: tcindex: update imperfect hash filters respecting rcu {CVE-2023-1281}
- seqbuf: Fix overflow in seqbufputmemhex() {CVE-2023-28772}
- wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassoc_ies() {CVE-2023-1380}
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513}
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989}
- net: sched: schqfq: prevent slab-out-of-bounds in qfqactivate_agg {CVE-2023-31436}
- cgroup-v1: Require capabilities to set release_agent {CVE-2022-0492}
- net: sched: fix use-after-free in tcnewtfilter() {CVE-2022-1055}
- SUNRPC: Ensure we flush any closed sockets before xsxprtfree() {CVE-2022-28893}
- net/sched: clsu32: fix netns refcount changes in u32change() {CVE-2022-29581}
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() {CVE-2022-2873}
- RDMA/cma: Do not change route.addr.srcaddr.ssfamily {CVE-2021-4028}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup {CVE-2022-2964}
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address {CVE-2022-1158}
- ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
- References