OESA-2024-1087

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1087
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1087.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2024-1087
Upstream
Published
2024-01-19T11:06:49Z
Modified
2025-08-12T05:24:05.553108Z
Summary
kernel security update
Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg() and btsockioctl() functions could lead to a use-after-free on a socket buffer ("skb"). This flaw allows a local user to cause a denial of service condition or potential code execution.(CVE-2023-51779)

An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.(CVE-2023-51780)

An issue was discovered in the Linux kernel before 6.6.8. atalkioctl in net/appletalk/ddp.c has a use-after-free because of an atalkrecvmsg race condition.(CVE-2023-51781)

An issue was discovered in the Linux kernel before 6.6.8. roseioctl in net/rose/afrose.c has a use-after-free because of a rose_accept race condition.(CVE-2023-51782)

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).(CVE-2023-6121)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS-SP2 / kernel

Package

Name
kernel
Purl
pkg:rpm/openEuler/kernel&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.10.0-153.39.0.116.oe2203sp2

Ecosystem specific 

{
    "aarch64": [
        "bpftool-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-debugsource-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-tools-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-headers-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "perf-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-debuginfo-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-tools-debuginfo-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-tools-devel-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-devel-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "bpftool-debuginfo-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "python3-perf-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "kernel-source-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "python3-perf-debuginfo-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm",
        "perf-debuginfo-5.10.0-153.39.0.116.oe2203sp2.aarch64.rpm"
    ],
    "src": [
        "kernel-5.10.0-153.39.0.116.oe2203sp2.src.rpm"
    ],
    "x86_64": [
        "perf-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-debuginfo-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-tools-devel-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "perf-debuginfo-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "bpftool-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-debugsource-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-tools-debuginfo-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-headers-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-source-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-devel-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "python3-perf-debuginfo-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-tools-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "python3-perf-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "bpftool-debuginfo-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm",
        "kernel-5.10.0-153.39.0.116.oe2203sp2.x86_64.rpm"
    ]
}