openEuler 20.03 LTS SP3 update for kernel



Risk Medium
Patch available YES
Number of vulnerabilities 8
CVE-ID CVE-2023-1582
CVE-2023-1611
CVE-2021-3923
CVE-2023-1637
CVE-2023-1670
CVE-2023-1838
CVE-2023-1855
CVE-2023-1859
CWE-ID CWE-362
CWE-416
CWE-401
CWE-1342
Exploitation vector Network
Public exploit N/A
Vulnerable software
 openEuler
Operating systems & Components / Operating system

python3-perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools
Operating systems & Components / Operating system package or component

python2-perf
Operating systems & Components / Operating system package or component

bpftool-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools-devel
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

bpftool
Operating systems & Components / Operating system package or component

perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools-debuginfo
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

kernel-debugsource
Operating systems & Components / Operating system package or component

python2-perf-debuginfo
Operating systems & Components / Operating system package or component

perf
Operating systems & Components / Operating system package or component

python3-perf
Operating systems & Components / Operating system package or component

kernel
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 8 vulnerabilities.

1) Race condition

EUVDB-ID: #VU74629

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1582

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within fs/proc/task_mmu.c. A local user can exploit the race and crash the kernel.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU75204

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1611

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the btrfs_search_slot() function in fs/btrfs/ctree.c. A local user can trigger a use-after-free error and crash the kernel.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Memory leak

EUVDB-ID: #VU74626

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3923

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due memory leak within RDMA over infiniband implementation in Linux kernel. A local user can force the application to leak memory by sensing commands to the /dev/infiniband/rdma_cm device node and gain access to sensitive information.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Information exposure through microarchitectural state after transient execution

EUVDB-ID: #VU74771

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1637

CWE-ID: CWE-1342 - Information Exposure through Microarchitectural State after Transient Execution

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due speculative execution behavior in the Linux kernel X86 CPU Power management options functionality. A local user can gain access to sensitive information.


Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU75450

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1670

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the Xircom 16-bit PCMCIA (PC-card) Ethernet driver. A local user can trigger a use-after-free error and execute arbitrary code on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Use-after-free

EUVDB-ID: #VU75205

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1838

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the vhost_net_set_backend() function in drivers/vhost/net.c. A local user can trigger a use-after-free error and crash the kernel.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU75451

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1855

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the xgene_hwmon_remove() function in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). A local user can trigger a use-after-free error and execute arbitrary code on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use-after-free

EUVDB-ID: #VU75769

Risk: Medium

CVSSv4.0: 4.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-1859

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a malicious guest to gain access to sensitive information or perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the xen_9pfs_front_removet() function in net/9p/trans_xen.c in Xen transport for 9pfs. A malicious guest VM can trigger a use-after-free error and gain access to sensitive information of the hypervisor or crash it.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP3

python3-perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools: before 4.19.90-2304.3.0.0197

python2-perf: before 4.19.90-2304.3.0.0197

bpftool-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-devel: before 4.19.90-2304.3.0.0197

kernel-devel: before 4.19.90-2304.3.0.0197

bpftool: before 4.19.90-2304.3.0.0197

perf-debuginfo: before 4.19.90-2304.3.0.0197

kernel-debuginfo: before 4.19.90-2304.3.0.0197

kernel-tools-debuginfo: before 4.19.90-2304.3.0.0197

kernel-source: before 4.19.90-2304.3.0.0197

kernel-debugsource: before 4.19.90-2304.3.0.0197

python2-perf-debuginfo: before 4.19.90-2304.3.0.0197

perf: before 4.19.90-2304.3.0.0197

python3-perf: before 4.19.90-2304.3.0.0197

kernel: before 4.19.90-2304.3.0.0197

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1229


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###