CLSA-2023-1701963303
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1701963303.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2023-1701963303
- Upstream
- Published
- 2023-12-07T15:35:07Z
- Modified
- 2026-05-27T11:34:48.806378748Z
- Summary
- kernel: Fix of 18 CVEs
- Details
-
- net/tls: do not free tlsrec on async operation in bpfexectxverdict() {CVE-2023-6176}
- wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719}
- mac80211: always allocate struct ieee80211elems {CVE-2022-42719}
- x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813}
- x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813}
- x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813}
- netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-4881}
- net: sched: schqfq: Fix UAF in qfqdequeue() {CVE-2023-4921}
- netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethash_netportnet.c {CVE-2023-42753}
- net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829}
- USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862}
- igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871}
- net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
- Fix double fget() in vhostnetset_backend() {CVE-2023-1838}
- nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178}
- drm/qxl: fix UAF on handle creation {CVE-2023-39198}
- net: add kerneldoc comment for skpeerlock {CVE-2021-4203}
- afunix: fix races in skpeerpid and skpeer_cred accesses {CVE-2021-4203}
- block-map: add __GFPZERO flag for allocpage in function biocopykern {CVE-2022-0494}
- media: ov519: add missing endpoint sanity checks {CVE-2020-11608}
- act_mirred: use the backlog for nested calls to mirred ingress {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth {CVE-2022-4269}
- inet: use bigger hash table for IP ID generation {CVE-2021-45486}
- net: revert "net: get rid of an signed integer overflow in ipidentsreserve()" {CVE-2021-45486}
- References