CLSA-2023-1693424916
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1693424916.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2023-1693424916
- Upstream
- Published
- 2023-08-30T20:11:40Z
- Modified
- 2026-06-01T00:33:21.967519684Z
- Summary
- kernel: Fix of 18 CVEs
- Details
-
- netfilter: nftsetpipapo: fix improper element removal {CVE-2023-4004}
- net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812}
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}
- net/sched: schqfq: account for stab overhead in qfqenqueue {CVE-2023-3611}
- net/sched: sch_qfq: refactor parsing of netlink parameters
- ipvlan:Fix out-of-bounds caused by unclear skb->cb {CVE-2023-3090}
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition {CVE-2023-35823}
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
- memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141}
- ovl: fix use after free in struct ovlaioreq {CVE-2023-1252}
- xen/netfront: don't use gnttabqueryforeign_access() for mapped status {CVE-2022-23037}
- xen/netfront: react properly to failing gnttabendforeignaccessref() {CVE-2022-23042}
- xen/netfront: don't trust the backend response data blindly
- xen/netfront: disentangle txskbfreelist
- xen: sync include/xen/interface/io/ring.h with Xen's newest version
- net/sched: flower: fix possible OOB write in flsetgeneve_opt() {CVE-2023-35788}
- rds: rdsrmzerocopycallback() use listfirst_entry() {CVE-2023-1078}
- misc: sgi-gru: fix use-after-free error in grusetcontextoption, grufault and gruhandleusercallos {CVE-2022-3424}
- NFSD: Cap rsize_bop result based on send buffer size {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READ {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
- SUNRPC: Fix svcxdrinitencode's buflen calculation {CVE-2022-43945}
- SUNRPC: Fix svcxdrinitdecode's end-of-buffer calculation {CVE-2022-43945}
- mm/mremap: hold the rmap lock in write mode when moving page table entries. {CVE-2022-39189}
- KVM: x86: do not report a vCPU as preempted outside instruction boundaries {CVE-2022-39189}
- net: tls: fix possible race condition between dotlsgetsockoptconf() and dotlssetsockoptconf() {CVE-2023-28466}
- tee: handle lookup of shm with reference count 0 {CVE-2021-44733}
- References