ALSA-2023:4377

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/9/ALSA-2023-4377.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:4377.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2023:4377

Related

Published

2023-08-01T00:00:00Z

Modified

2023-08-08T13:12:29Z

Summary

Important: kernel security, bug fix, and enhancement update

Details

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090)
kernel: clsflower: out-of-bounds write in flsetgeneveopt() (CVE-2023-35788)
kernel: KVM: x86/mmu: race condition in directpagefault() (CVE-2022-45869)
kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9 / bpftool

Package

Name: bpftool

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.0-284.25.1.el9_2

AlmaLinux:9 / kernel

Package

Name: kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k

Package

Name: kernel-64k

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-core

Package

Name: kernel-64k-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-debug

Package

Name: kernel-64k-debug

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-debug-core

Package

Name: kernel-64k-debug-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-debug-devel

Package

Name: kernel-64k-debug-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-debug-devel-matched

Package

Name: kernel-64k-debug-devel-matched

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-debug-modules

Package

Name: kernel-64k-debug-modules

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-debug-modules-core

Package

Name: kernel-64k-debug-modules-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-debug-modules-extra

Package

Name: kernel-64k-debug-modules-extra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-devel

Package

Name: kernel-64k-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-devel-matched

Package

Name: kernel-64k-devel-matched

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-modules

Package

Name: kernel-64k-modules

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-modules-core

Package

Name: kernel-64k-modules-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-64k-modules-extra

Package

Name: kernel-64k-modules-extra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-abi-stablelists

Package

Name: kernel-abi-stablelists

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-core

Package

Name: kernel-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-cross-headers

Package

Name: kernel-cross-headers

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug

Package

Name: kernel-debug

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug-core

Package

Name: kernel-debug-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug-devel

Package

Name: kernel-debug-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug-devel-matched

Package

Name: kernel-debug-devel-matched

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug-modules

Package

Name: kernel-debug-modules

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug-modules-core

Package

Name: kernel-debug-modules-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug-modules-extra

Package

Name: kernel-debug-modules-extra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-debug-uki-virt

Package

Name: kernel-debug-uki-virt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-devel

Package

Name: kernel-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-devel-matched

Package

Name: kernel-devel-matched

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-doc

Package

Name: kernel-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-modules

Package

Name: kernel-modules

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-modules-core

Package

Name: kernel-modules-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-modules-extra

Package

Name: kernel-modules-extra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-tools

Package

Name: kernel-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-tools-libs

Package

Name: kernel-tools-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-tools-libs-devel

Package

Name: kernel-tools-libs-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-uki-virt

Package

Name: kernel-uki-virt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-zfcpdump

Package

Name: kernel-zfcpdump

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-zfcpdump-core

Package

Name: kernel-zfcpdump-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-zfcpdump-devel

Package

Name: kernel-zfcpdump-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-zfcpdump-devel-matched

Package

Name: kernel-zfcpdump-devel-matched

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-zfcpdump-modules

Package

Name: kernel-zfcpdump-modules

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-zfcpdump-modules-core

Package

Name: kernel-zfcpdump-modules-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / kernel-zfcpdump-modules-extra

Package

Name: kernel-zfcpdump-modules-extra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / perf

Package

Name: perf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / python3-perf

Package

Name: python3-perf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2

AlmaLinux:9 / rtla

Package

Name: rtla

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.0-284.25.1.el9_2