{
  "cveId": "CVE-2023-2008",
  "url": "https://patchblox.com/security/cve/CVE-2023-2008",
  "summary": "CVE-2023-2008 is fixed in 39 products on 1 platform, first by RHSA-2022:8267, released November 15, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: A flaw was found in the Linux kernel\u0027s udmabuf device driver, within a fault handler",
  "description": "A flaw was found in the Linux kernel\u0027s udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.",
  "published": "2022-11-15T00:00:00Z",
  "severity": "high",
  "cvss": 8.2,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "epss": 0.0101,
  "epssPercentile": 0.63271,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-stablelists",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-kvm",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-kvm",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.rt21.168.el9_1",
      "fix": "RHSA-2022:7933",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7933",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.18.14-1",
      "fix": "DEBIAN-CVE-2023-2008",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2008",
      "released": "2023-04-14T21:15:08Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.18.14-1",
      "fix": "DEBIAN-CVE-2023-2008",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2008",
      "released": "2023-04-14T21:15:08Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.18.14-1",
      "fix": "DEBIAN-CVE-2023-2008",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2008",
      "released": "2023-04-14T21:15:08Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}