OESA-2023-1437

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1437
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1437.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2023-1437
Upstream
  • CVE-2023-3117
Published
2023-07-21T11:05:33Z
Modified
2025-08-12T05:19:58.408384Z
Summary
kernel security update
Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.

The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.

We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

(CVE-2023-3090)

A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAPNETADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; nft_chain_lookup_byid() failed to check whether a chain was active and CAPNETADMIN is in any user or network namespace(CVE-2023-31248)

An issue was discovered in the Linux kernel through 6.1-rc8. dpucrtcatomiccheck in drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)

A flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)

A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS-SP2 / kernel

Package

Name
kernel
Purl
pkg:rpm/openEuler/kernel&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.10.0-153.19.0.95.oe2203sp2

Ecosystem specific 

{
    "src": [
        "kernel-5.10.0-153.19.0.95.oe2203sp2.src.rpm"
    ],
    "x86_64": [
        "kernel-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "bpftool-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-source-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "python3-perf-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-tools-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "bpftool-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-debugsource-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-tools-devel-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "perf-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-tools-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-headers-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "python3-perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm",
        "kernel-devel-5.10.0-153.19.0.95.oe2203sp2.x86_64.rpm"
    ],
    "aarch64": [
        "kernel-tools-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "python3-perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "perf-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "perf-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "bpftool-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "bpftool-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "python3-perf-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-debugsource-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-devel-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-tools-debuginfo-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-headers-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-source-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm",
        "kernel-tools-devel-5.10.0-153.19.0.95.oe2203sp2.aarch64.rpm"
    ]
}