CVE-2023-2008

linux: A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler

CVE-2023-2008 is fixed in 39 products on 1 platform, first by RHSA-2022:8267, released November 15, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.2
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0101
63rd percentile

A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-abi-stablelists · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-core · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-debug · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-debug-core · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-debug-devel · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-debug-devel-matched · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-debug-modules · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-debug-modules-extra · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-devel · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-devel-matched · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-doc · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-modules · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-modules-extra · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-rt · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-core · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-debug · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-debug-core · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-debug-devel · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-debug-kvm · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-debug-modules · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-debug-modules-extra · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-devel · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-kvm · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-modules · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-rt-modules-extra · RHEL 9 0:5.14.0-162.6.1.rt21.168.el9_1 RHSA-2022:7933 Nov 15, 2022
kernel-tools · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-tools-libs · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-tools-libs-devel · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-zfcpdump · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-zfcpdump-core · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-zfcpdump-devel · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-zfcpdump-devel-matched · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-zfcpdump-modules · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
kernel-zfcpdump-modules-extra · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
linux · Debian 12.15 (bookworm) 5.18.14-1 DEBIAN-CVE-2023-2008 Apr 14, 2023
linux · Debian 13.5 (trixie) 5.18.14-1 DEBIAN-CVE-2023-2008 Apr 14, 2023
linux · Debian 14 5.18.14-1 DEBIAN-CVE-2023-2008 Apr 14, 2023
perf · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022
python3-perf · RHEL 9 0:5.14.0-162.6.1.el9_1 RHSA-2022:8267 Nov 15, 2022