openEuler 22.03 LTS update for kernel



Published: 2023-04-11
Risk Low
Patch available YES
Number of vulnerabilities 6
CVE-ID CVE-2022-29901
CVE-2022-4269
CVE-2023-28327
CVE-2023-28328
CVE-2023-1380
CVE-2023-1513
CWE-ID CWE-1037
CWE-833
CWE-476
CWE-125
CWE-665
Exploitation vector Local
Public exploit N/A
Vulnerable software
Subscribe 		openEuler
Operating systems & Components / Operating system

kernel-tools
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

bpftool
Operating systems & Components / Operating system package or component

kernel-debugsource
Operating systems & Components / Operating system package or component

kernel-debuginfo
Operating systems & Components / Operating system package or component

perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

kernel-tools-devel
Operating systems & Components / Operating system package or component

python3-perf
Operating systems & Components / Operating system package or component

kernel-headers
Operating systems & Components / Operating system package or component

kernel-tools-debuginfo
Operating systems & Components / Operating system package or component

python3-perf-debuginfo
Operating systems & Components / Operating system package or component

perf
Operating systems & Components / Operating system package or component

bpftool-debuginfo
Operating systems & Components / Operating system package or component

kernel
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 6 vulnerabilities.

1) Processor optimization removal or modification of security-critical code

EUVDB-ID: #VU65220

Risk: Low

CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-29901

CWE-ID: CWE-1037 - Processor optimization removal or modification of security-critical code

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to the way non-transparent sharing of branch predictor targets between contexts. A local user can exploit the vulnerability to gain access to sensitive information.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-tools: before 5.10.0-60.89.0.113

kernel-source: before 5.10.0-60.89.0.113

bpftool: before 5.10.0-60.89.0.113

kernel-debugsource: before 5.10.0-60.89.0.113

kernel-debuginfo: before 5.10.0-60.89.0.113

perf-debuginfo: before 5.10.0-60.89.0.113

kernel-devel: before 5.10.0-60.89.0.113

kernel-tools-devel: before 5.10.0-60.89.0.113

python3-perf: before 5.10.0-60.89.0.113

kernel-headers: before 5.10.0-60.89.0.113

kernel-tools-debuginfo: before 5.10.0-60.89.0.113

python3-perf-debuginfo: before 5.10.0-60.89.0.113

perf: before 5.10.0-60.89.0.113

bpftool-debuginfo: before 5.10.0-60.89.0.113

kernel: before 5.10.0-60.89.0.113

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1210


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Deadlock

EUVDB-ID: #VU73186

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-4269

CWE-ID: CWE-833 - Deadlock

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an error in the Linux kernel Traffic Control (TC) subsystem. A local user can use a specific network configuration (redirecting egress packets to ingress using TC action "mirred") to trigger a CPU soft lockup.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-tools: before 5.10.0-60.89.0.113

kernel-source: before 5.10.0-60.89.0.113

bpftool: before 5.10.0-60.89.0.113

kernel-debugsource: before 5.10.0-60.89.0.113

kernel-debuginfo: before 5.10.0-60.89.0.113

perf-debuginfo: before 5.10.0-60.89.0.113

kernel-devel: before 5.10.0-60.89.0.113

kernel-tools-devel: before 5.10.0-60.89.0.113

python3-perf: before 5.10.0-60.89.0.113

kernel-headers: before 5.10.0-60.89.0.113

kernel-tools-debuginfo: before 5.10.0-60.89.0.113

python3-perf-debuginfo: before 5.10.0-60.89.0.113

perf: before 5.10.0-60.89.0.113

bpftool-debuginfo: before 5.10.0-60.89.0.113

kernel: before 5.10.0-60.89.0.113

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1210


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) NULL pointer dereference

EUVDB-ID: #VU74772

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-28327

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the unix_diag_get_exact() function in net/unix/diag.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-tools: before 5.10.0-60.89.0.113

kernel-source: before 5.10.0-60.89.0.113

bpftool: before 5.10.0-60.89.0.113

kernel-debugsource: before 5.10.0-60.89.0.113

kernel-debuginfo: before 5.10.0-60.89.0.113

perf-debuginfo: before 5.10.0-60.89.0.113

kernel-devel: before 5.10.0-60.89.0.113

kernel-tools-devel: before 5.10.0-60.89.0.113

python3-perf: before 5.10.0-60.89.0.113

kernel-headers: before 5.10.0-60.89.0.113

kernel-tools-debuginfo: before 5.10.0-60.89.0.113

python3-perf-debuginfo: before 5.10.0-60.89.0.113

perf: before 5.10.0-60.89.0.113

bpftool-debuginfo: before 5.10.0-60.89.0.113

kernel: before 5.10.0-60.89.0.113

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1210


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) NULL pointer dereference

EUVDB-ID: #VU74126

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-28328

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. A local user can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-tools: before 5.10.0-60.89.0.113

kernel-source: before 5.10.0-60.89.0.113

bpftool: before 5.10.0-60.89.0.113

kernel-debugsource: before 5.10.0-60.89.0.113

kernel-debuginfo: before 5.10.0-60.89.0.113

perf-debuginfo: before 5.10.0-60.89.0.113

kernel-devel: before 5.10.0-60.89.0.113

kernel-tools-devel: before 5.10.0-60.89.0.113

python3-perf: before 5.10.0-60.89.0.113

kernel-headers: before 5.10.0-60.89.0.113

kernel-tools-debuginfo: before 5.10.0-60.89.0.113

python3-perf-debuginfo: before 5.10.0-60.89.0.113

perf: before 5.10.0-60.89.0.113

bpftool-debuginfo: before 5.10.0-60.89.0.113

kernel: before 5.10.0-60.89.0.113

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1210


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Out-of-bounds read

EUVDB-ID: #VU73280

Risk: Low

CVSSv3.1: 3.3 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-1380

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the Broadcom Full MAC Wi-Fi driver (brcmfmac.ko). A local user can trigger an out-of-bounds read error and read contents of kernel memory on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-tools: before 5.10.0-60.89.0.113

kernel-source: before 5.10.0-60.89.0.113

bpftool: before 5.10.0-60.89.0.113

kernel-debugsource: before 5.10.0-60.89.0.113

kernel-debuginfo: before 5.10.0-60.89.0.113

perf-debuginfo: before 5.10.0-60.89.0.113

kernel-devel: before 5.10.0-60.89.0.113

kernel-tools-devel: before 5.10.0-60.89.0.113

python3-perf: before 5.10.0-60.89.0.113

kernel-headers: before 5.10.0-60.89.0.113

kernel-tools-debuginfo: before 5.10.0-60.89.0.113

python3-perf-debuginfo: before 5.10.0-60.89.0.113

perf: before 5.10.0-60.89.0.113

bpftool-debuginfo: before 5.10.0-60.89.0.113

kernel: before 5.10.0-60.89.0.113

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1210


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Improper Initialization

EUVDB-ID: #VU74630

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-1513

CWE-ID: CWE-665 - Improper Initialization

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to improper initialization when calling the KVM_GET_DEBUGREGS ioctl on 32-bit systems. A local user can run a specially crafted application to gain access to sensitive information.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

kernel-tools: before 5.10.0-60.89.0.113

kernel-source: before 5.10.0-60.89.0.113

bpftool: before 5.10.0-60.89.0.113

kernel-debugsource: before 5.10.0-60.89.0.113

kernel-debuginfo: before 5.10.0-60.89.0.113

perf-debuginfo: before 5.10.0-60.89.0.113

kernel-devel: before 5.10.0-60.89.0.113

kernel-tools-devel: before 5.10.0-60.89.0.113

python3-perf: before 5.10.0-60.89.0.113

kernel-headers: before 5.10.0-60.89.0.113

kernel-tools-debuginfo: before 5.10.0-60.89.0.113

python3-perf-debuginfo: before 5.10.0-60.89.0.113

perf: before 5.10.0-60.89.0.113

bpftool-debuginfo: before 5.10.0-60.89.0.113

kernel: before 5.10.0-60.89.0.113

External links

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1210


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###