openEuler 22.03 LTS update for kernel

Published: 2023-01-13

Risk	Medium
Patch available	YES
Number of vulnerabilities	13
CVE-ID	CVE-2022-2873 CVE-2022-3903 CVE-2022-3104 CVE-2022-3111 CVE-2022-3107 CVE-2022-3112 CVE-2022-3113 CVE-2022-3115 CVE-2022-3114 CVE-2022-2196 CVE-2022-47942 CVE-2022-47940 CVE-2022-47943
CWE-ID	CWE-125 CWE-399 CWE-476 CWE-665 CWE-122
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	openEuler Operating systems & Components / Operating system kernel-debuginfo Operating systems & Components / Operating system package or component kernel-headers Operating systems & Components / Operating system package or component python3-perf-debuginfo Operating systems & Components / Operating system package or component kernel-source Operating systems & Components / Operating system package or component bpftool-debuginfo Operating systems & Components / Operating system package or component perf-debuginfo Operating systems & Components / Operating system package or component kernel-tools-devel Operating systems & Components / Operating system package or component bpftool Operating systems & Components / Operating system package or component kernel-tools Operating systems & Components / Operating system package or component python3-perf Operating systems & Components / Operating system package or component perf Operating systems & Components / Operating system package or component kernel-debugsource Operating systems & Components / Operating system package or component kernel-devel Operating systems & Components / Operating system package or component kernel-tools-debuginfo Operating systems & Components / Operating system package or component kernel Operating systems & Components / Operating system package or component
Vendor	openEuler

Security Bulletin

This security bulletin contains information about 13 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU66807

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-2873

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to crash the kernel.

The vulnerability exists due to a boundary condition within the Intel iSMT SMBus host controller driver. A local user can send specially crafted data to the I2C_SMBUS IOCTL, trigger an out-of-bounds read error and crash the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource management error

EUVDB-ID: #VU70465

Risk: Low

CVSSv3.1: 4 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3903

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows an attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an incorrect read request flaw in the Infrared Transceiver USB driver in Linux kernel. An attacker with physical access to the system can starve system resources and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) NULL pointer dereference

EUVDB-ID: #VU71578

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3104

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the lkdtm_ARRAY_BOUNDS() function in drivers/misc/lkdtm/bugs.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) NULL pointer dereference

EUVDB-ID: #VU71540

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3111

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the free_charger_irq() function in drivers/power/supply/wm8350_power.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) NULL pointer dereference

EUVDB-ID: #VU71538

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3107

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the netvsc_get_ethtool_stats() function in drivers/net/hyperv/netvsc_drv.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) NULL pointer dereference

EUVDB-ID: #VU71579

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3112

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the amvdec_set_canvases() function in drivers/staging/media/meson/vdec/vdec_helpers.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) NULL pointer dereference

EUVDB-ID: #VU71580

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3113

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the mtk_vcodec_fw_vpu_init() function in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) NULL pointer dereference

EUVDB-ID: #VU71581

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3115

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the malidp_crtc_reset() function in drivers/gpu/drm/arm/malidp_crtc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) NULL pointer dereference

EUVDB-ID: #VU70498

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3114

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the imx_register_uart_clocks() function in drivers/clk/imx/clk.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Improper Initialization

EUVDB-ID: #VU74019

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-2196

CWE-ID: CWE-665 - Improper Initialization

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper initialization within nVMX in Linux kernel. A local user can perform speculative execution attacks and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Heap-based buffer overflow

EUVDB-ID: #VU70482

Risk: Medium

CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-47942

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command. A remote user can send specially crafted data to the ksmbd daemon, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Out-of-bounds read

EUVDB-ID: #VU70485

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-47940

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in smb2_write in fs/ksmbd/smb2pdu.c. A remote user can trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Out-of-bounds read

EUVDB-ID: #VU70484

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-47943

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service attack.

The vulnerability exists due to an out-of-bounds read in ksmbd due to a large length in the zero DataOffset case in SMB2_WRITE call. A remote user can send specially crafted request to the ksmbd daemon, trigger an out-of-bounds write error and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-debuginfo: before 5.10.0-60.77.0.101

kernel-headers: before 5.10.0-60.77.0.101

python3-perf-debuginfo: before 5.10.0-60.77.0.101

kernel-source: before 5.10.0-60.77.0.101

bpftool-debuginfo: before 5.10.0-60.77.0.101

perf-debuginfo: before 5.10.0-60.77.0.101

kernel-tools-devel: before 5.10.0-60.77.0.101

bpftool: before 5.10.0-60.77.0.101

kernel-tools: before 5.10.0-60.77.0.101

python3-perf: before 5.10.0-60.77.0.101

perf: before 5.10.0-60.77.0.101

kernel-debugsource: before 5.10.0-60.77.0.101

kernel-devel: before 5.10.0-60.77.0.101

kernel-tools-debuginfo: before 5.10.0-60.77.0.101

kernel: before 5.10.0-60.77.0.101

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1035

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.