OESA-2023-1071

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1071
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1071.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2023-1071
Upstream
Published
2023-02-10T11:05:33Z
Modified
2026-08-18T01:16:13Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
kernel security update
Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.(CVE-2023-0179)

atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).(CVE-2023-23455)

cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).(CVE-2023-23454)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS / kernel

Package

Name
kernel
Purl
pkg:rpm/openEuler/kernel&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.10.0-60.79.0.103.oe2203

Ecosystem specific 

{
    "aarch64": [
        "kernel-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "python3-perf-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-debuginfo-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "python3-perf-debuginfo-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-debugsource-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-tools-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "bpftool-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "perf-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-tools-debuginfo-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-source-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-headers-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-tools-devel-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "bpftool-debuginfo-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "kernel-devel-5.10.0-60.79.0.103.oe2203.aarch64.rpm",
        "perf-debuginfo-5.10.0-60.79.0.103.oe2203.aarch64.rpm"
    ],
    "src": [
        "kernel-5.10.0-60.79.0.103.oe2203.src.rpm"
    ],
    "x86_64": [
        "bpftool-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "perf-debuginfo-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-debugsource-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-devel-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-tools-debuginfo-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "python3-perf-debuginfo-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-tools-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-debuginfo-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "perf-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "python3-perf-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-source-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-headers-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "kernel-tools-devel-5.10.0-60.79.0.103.oe2203.x86_64.rpm",
        "bpftool-debuginfo-5.10.0-60.79.0.103.oe2203.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2023-1071.json"