CVE-2023-2008
linux: A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler
CVE-2023-2008 is fixed in 39 products on 1 platform, first by RHSA-2022:8267, released November 15, 2022. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.2
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0101
63rd percentile
A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-abi-stablelists · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-core · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-debug · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-debug-core · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-debug-devel · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-debug-devel-matched · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-debug-modules · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-debug-modules-extra · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-devel · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-devel-matched · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-doc · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-modules · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-modules-extra · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-rt · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-core · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-debug · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-debug-core · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-debug-devel · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-debug-kvm · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-debug-modules · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-debug-modules-extra · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-devel · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-kvm · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-modules · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-rt-modules-extra · RHEL 9 | 0:5.14.0-162.6.1.rt21.168.el9_1 | RHSA-2022:7933 | Nov 15, 2022 |
| kernel-tools · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-tools-libs · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-tools-libs-devel · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-zfcpdump · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-zfcpdump-core · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-zfcpdump-devel · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-zfcpdump-devel-matched · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-zfcpdump-modules · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| kernel-zfcpdump-modules-extra · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| linux · Debian 12.15 (bookworm) | 5.18.14-1 | DEBIAN-CVE-2023-2008 | Apr 14, 2023 |
| linux · Debian 13.5 (trixie) | 5.18.14-1 | DEBIAN-CVE-2023-2008 | Apr 14, 2023 |
| linux · Debian 14 | 5.18.14-1 | DEBIAN-CVE-2023-2008 | Apr 14, 2023 |
| perf · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |
| python3-perf · RHEL 9 | 0:5.14.0-162.6.1.el9_1 | RHSA-2022:8267 | Nov 15, 2022 |