OESA-2023-1187

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1187
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1187.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2023-1187
Upstream
Published
2023-03-31T11:05:05Z
Modified
2025-08-12T05:13:39.578343Z
Summary
kernel security update
Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.(CVE-2022-29901)

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.(CVE-2022-4269)

A flaw was found in the Linux kernel. A use-after-free may be triggered in asuskbdbacklightset when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the workstruct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asuskbdleds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.(CVE-2023-1079)

Kernel: denial of service in tipcconnclose(CVE-2023-1382)

dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).(CVE-2023-28466)

Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcfextsexec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.(CVE-2023-1281)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / kernel

Package

Name
kernel
Purl
pkg:rpm/openEuler/kernel&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.19.90-2303.5.0.0194.oe1

Ecosystem specific 

{
    "src": [
        "kernel-4.19.90-2303.5.0.0194.oe1.src.rpm"
    ],
    "x86_64": [
        "perf-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "perf-debuginfo-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "bpftool-debuginfo-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "python2-perf-debuginfo-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "python3-perf-debuginfo-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-debugsource-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-tools-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-devel-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-debuginfo-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "bpftool-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-source-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "python2-perf-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "python3-perf-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-tools-devel-4.19.90-2303.5.0.0194.oe1.x86_64.rpm",
        "kernel-tools-debuginfo-4.19.90-2303.5.0.0194.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "kernel-devel-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "python2-perf-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "kernel-tools-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "perf-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "kernel-tools-devel-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "python3-perf-debuginfo-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "bpftool-debuginfo-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "kernel-source-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "bpftool-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "kernel-debugsource-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "python3-perf-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "kernel-debuginfo-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "python2-perf-debuginfo-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "perf-debuginfo-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "kernel-tools-debuginfo-4.19.90-2303.5.0.0194.oe1.aarch64.rpm",
        "kernel-4.19.90-2303.5.0.0194.oe1.aarch64.rpm"
    ]
}