OESA-2023-1435

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1435
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1435.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2023-1435
Upstream
  • CVE-2023-3117
Published
2023-07-21T11:05:33Z
Modified
2025-08-12T05:17:29.393635Z
Summary
kernel security update
Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.

The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.

We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

(CVE-2023-3090)

A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAPNETADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; nft_chain_lookup_byid() failed to check whether a chain was active and CAPNETADMIN is in any user or network namespace(CVE-2023-31248)

An issue was discovered in the Linux kernel through 6.1-rc8. dpucrtcatomiccheck in drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)

A flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)

A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS / kernel

Package

Name
kernel
Purl
pkg:rpm/openEuler/kernel&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.10.0-60.103.0.130.oe2203

Ecosystem specific 

{
    "x86_64": [
        "kernel-source-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-headers-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-tools-debuginfo-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "python3-perf-debuginfo-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "python3-perf-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "perf-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-tools-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-debuginfo-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "bpftool-debuginfo-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-tools-devel-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-debugsource-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "bpftool-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "kernel-devel-5.10.0-60.103.0.130.oe2203.x86_64.rpm",
        "perf-debuginfo-5.10.0-60.103.0.130.oe2203.x86_64.rpm"
    ],
    "src": [
        "kernel-5.10.0-60.103.0.130.oe2203.src.rpm"
    ],
    "aarch64": [
        "kernel-tools-devel-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "perf-debuginfo-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-tools-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "perf-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-devel-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-debuginfo-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "python3-perf-debuginfo-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-debugsource-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "python3-perf-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "bpftool-debuginfo-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "bpftool-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-tools-debuginfo-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-headers-5.10.0-60.103.0.130.oe2203.aarch64.rpm",
        "kernel-source-5.10.0-60.103.0.130.oe2203.aarch64.rpm"
    ]
}