openEuler 22.03 LTS update for kernel



Risk Medium
Patch available YES
Number of vulnerabilities 13
CVE-ID CVE-2022-2873
CVE-2022-3903
CVE-2022-3104
CVE-2022-3111
CVE-2022-3107
CVE-2022-3112
CVE-2022-3113
CVE-2022-3115
CVE-2022-3114
CVE-2022-2196
CVE-2022-47942
CVE-2022-47940
CVE-2022-47943
CWE-ID CWE-125
CWE-399
CWE-476
CWE-665
CWE-122
Exploitation vector Network
Public exploit N/A
Vulnerable software
 openEuler
Operating systems & Components / Operating system

kernel-debuginfo
Operating systems & Components / Operating system package or component

kernel-headers
Operating systems & Components / Operating system package or component

python3-perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

bpftool-debuginfo
Operating systems & Components / Operating system package or component

perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools-devel
Operating systems & Components / Operating system package or component

bpftool
Operating systems & Components / Operating system package or component

kernel-tools
Operating systems & Components / Operating system package or component

python3-perf
Operating systems & Components / Operating system package or component

perf
Operating systems & Components / Operating system package or component

kernel-debugsource
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

kernel-tools-debuginfo
Operating systems & Components / Operating system package or component

kernel
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 13 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU66807

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-2873

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to crash the kernel.

The vulnerability exists due to a boundary condition within the Intel iSMT SMBus host controller driver. A local user can send specially crafted data to the I2C_SMBUS IOCTL, trigger an out-of-bounds read error and crash the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource management error

EUVDB-ID: #VU70465

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3903

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows an attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an incorrect read request flaw in the Infrared Transceiver USB driver in Linux kernel. An attacker with physical access to the system can starve system resources and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) NULL pointer dereference

EUVDB-ID: #VU71578

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3104

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the lkdtm_ARRAY_BOUNDS() function in drivers/misc/lkdtm/bugs.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) NULL pointer dereference

EUVDB-ID: #VU71540

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3111

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the free_charger_irq() function in drivers/power/supply/wm8350_power.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) NULL pointer dereference

EUVDB-ID: #VU71538

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3107

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the netvsc_get_ethtool_stats() function in drivers/net/hyperv/netvsc_drv.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) NULL pointer dereference

EUVDB-ID: #VU71579

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3112

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the amvdec_set_canvases() function in drivers/staging/media/meson/vdec/vdec_helpers.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) NULL pointer dereference

EUVDB-ID: #VU71580

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3113

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the mtk_vcodec_fw_vpu_init() function in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) NULL pointer dereference

EUVDB-ID: #VU71581

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3115

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the malidp_crtc_reset() function in drivers/gpu/drm/arm/malidp_crtc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) NULL pointer dereference

EUVDB-ID: #VU70498

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3114

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the imx_register_uart_clocks() function in drivers/clk/imx/clk.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Improper Initialization

EUVDB-ID: #VU74019

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-2196

CWE-ID: CWE-665 - Improper Initialization

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper initialization within nVMX in Linux kernel. A local user can perform speculative execution attacks and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Heap-based buffer overflow

EUVDB-ID: #VU70482

Risk: Medium

CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-47942

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command. A remote user can send specially crafted data to the ksmbd daemon, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Out-of-bounds read

EUVDB-ID: #VU70485

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-47940

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in smb2_write in fs/ksmbd/smb2pdu.c. A remote user can trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Out-of-bounds read

EUVDB-ID: #VU70484

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-47943

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service attack.

The vulnerability exists due to an out-of-bounds read in ksmbd due to a large length in the zero DataOffset case in SMB2_WRITE call. A remote user can send specially crafted request to the ksmbd daemon, trigger an out-of-bounds write error and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###