Buffer overflow in Linux kernel - CVE-2023-44466

Vulnerability identifier: #VU81660

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-44466

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the ceph_decode_32() function in net/ceph/messenger_v2.c in the Ceph filesystem when handling TCP packets. A remote attacker can send specially crafted HELLO or AUTH frames to trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Linux kernel
Amazon Linux AMI
Anolis OS
Slackware Linux
Ubuntu
bpftool
kernel-debug-core
kernel-debug-devel
kernel-debug-modules
kernel-debug-modules-extra
kernel-debug
kernel-cross-headers
kernel-core
kernel
kernel-devel
kernel-headers
kernel-modules
kernel-modules-extra
kernel-tools
kernel-tools-libs
perf
python3-perf
kernel-abi-stablelists
kernel-doc
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-86-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-86-lowlatency (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-86-generic-lpae (Ubuntu package)
linux-image-5.15.0-86-generic-64k (Ubuntu package)
linux-image-5.15.0-86-generic (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.15.0-1030-gkeop (Ubuntu package)
linux-image-5.15.0-1037-nvidia (Ubuntu package)
linux-image-5.15.0-1037-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.15.0-1040-raspi (Ubuntu package)
linux-image-5.15.0-1040-ibm (Ubuntu package)
linux-image-5.15.0-1043-intel-iotg (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1044-kvm (Ubuntu package)
linux-image-5.15.0-1044-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1044-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1045-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1047-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1049-azure-fde (Ubuntu package)
linux-image-5.15.0-1049-azure (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-5.15.139/kernel-huge
linux-5.15.139/kernel-modules
linux-5.15.139/kernel-generic
linux-5.15.139/kernel-headers
linux-image-6.2.0-36-generic-lpae (Ubuntu package)
linux-image-6.2.0-36-generic-64k (Ubuntu package)
linux-image-6.2.0-36-generic (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1008-starfive (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.2.0-1009-starfive (Ubuntu package)
linux-image-6.2.0-1011-nvidia (Ubuntu package)
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package)
linux-image-nvidia-6.2 (Ubuntu package)
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package)
linux-image-nvidia-64k-6.2 (Ubuntu package)
linux-image-nvidia-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1015-oracle (Ubuntu package)
linux-image-6.2.0-1015-aws (Ubuntu package)
linux-image-6.2.0-1016-kvm (Ubuntu package)
linux-image-6.2.0-1016-azure (Ubuntu package)
linux-image-6.2.0-1016-lowlatency (Ubuntu package)
linux-image-6.2.0-1016-lowlatency-64k (Ubuntu package)
linux-image-6.2.0-1016-azure-fde (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1016-raspi (Ubuntu package)
linux-image-6.2.0-1018-gcp (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 6.4.5
bpftool - update to 4.18.0-477.13.1.0.1
kernel-debug-core - update to 4.18.0-477.13.1.0.1
kernel-debug-devel - update to 4.18.0-477.13.1.0.1
kernel-debug-modules - update to 4.18.0-477.13.1.0.1
kernel-debug-modules-extra - update to 4.18.0-477.13.1.0.1
kernel-debug - update to 4.18.0-477.13.1.0.1
kernel-cross-headers - update to 4.18.0-477.13.1.0.1
kernel-core - update to 4.18.0-477.13.1.0.1
kernel - update to 4.18.0-477.13.1.0.1
kernel-devel - update to 4.18.0-477.13.1.0.1
kernel-headers - update to 4.18.0-477.13.1.0.1
kernel-modules - update to 4.18.0-477.13.1.0.1
kernel-modules-extra - update to 4.18.0-477.13.1.0.1
kernel-tools - update to 4.18.0-477.13.1.0.1
kernel-tools-libs - update to 4.18.0-477.13.1.0.1
perf - update to 4.18.0-477.13.1.0.1
python3-perf - update to 4.18.0-477.13.1.0.1
kernel-abi-stablelists - update to 4.18.0-477.13.1.0.1
kernel-doc - update to 4.18.0-477.13.1.0.1
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.86.83, 6.2.0.36.36
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.86.83, 6.2.0.36.36
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.86.83, 6.2.0.36.36
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.86.83, 6.2.0.36.36
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.86.88, 6.2.0.1016.16
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.86.88, 6.2.0.1016.16
linux-image-5.15.0-86-lowlatency-64k (Ubuntu package) - update to 5.15.0-86.95~20.04.1
linux-image-5.15.0-86-lowlatency (Ubuntu package) - update to 5.15.0-86.95~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.95~20.04.41
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.95~20.04.41
linux-image-5.15.0-86-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-86.96, 5.15.0-86.96~20.04.1
linux-image-5.15.0-86-generic-64k (Ubuntu package) - addressed in versions 5.15.0-86.96, 5.15.0-86.96~20.04.1
linux-image-5.15.0-86-generic (Ubuntu package) - addressed in versions 5.15.0-86.96, 5.15.0-86.96~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1030.29, 5.15.0.1030.35~20.04.26
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1030.29
linux-image-5.15.0-1030-gkeop (Ubuntu package) - update to 5.15.0-1030.35~20.04.1
linux-image-5.15.0-1037-nvidia (Ubuntu package) - update to 5.15.0-1037.37
linux-image-5.15.0-1037-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1037.37
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1037.37
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1037.37
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1040.36, 5.15.0.1040.43~20.04.12
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1040.38, 6.2.0.1016.19
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1040.38, 6.2.0.1016.19
linux-image-5.15.0-1040-raspi (Ubuntu package) - update to 5.15.0-1040.43
linux-image-5.15.0-1040-ibm (Ubuntu package) - update to 5.15.0-1040.43~20.04.1
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1043.43, 5.15.0.1043.49~20.04.33
linux-image-5.15.0-1043-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1043.49, 5.15.0-1043.49~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1043.49~20.04.33
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1044.40
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1044.40, 6.2.0.1016.16
linux-image-gke (Ubuntu package) - update to 5.15.0.1044.43
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1044.43
linux-image-5.15.0-1044-kvm (Ubuntu package) - update to 5.15.0-1044.49
linux-image-5.15.0-1044-gke (Ubuntu package) - update to 5.15.0-1044.49
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1044.52~20.04.1, 6.2.0.1018.18, 6.2.0.1018.20~22.04.1
linux-image-5.15.0-1044-gcp (Ubuntu package) - update to 5.15.0-1044.52~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1045.40, 5.15.0.1045.51~20.04.1, 6.2.0.1015.15
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1045.40
linux-image-5.15.0-1045-oracle (Ubuntu package) - addressed in versions 5.15.0-1045.51, 5.15.0-1045.51~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1047.46
linux-image-5.15.0-1047-aws (Ubuntu package) - update to 5.15.0-1047.52~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1047.52~20.04.35, 6.2.0.1015.15~22.04.1, 6.2.0.1015.16
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1049.45
linux-image-5.15.0-1049-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1049.56.1, 5.15.0-1049.56~20.04.1.1
linux-image-5.15.0-1049-azure (Ubuntu package) - update to 5.15.0-1049.56~20.04.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1049.56~20.04.1.27, 6.2.0.1016.16~22.04.1.13
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1049.56~20.04.38, 6.2.0.1016.16~22.04.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1049.56~20.04.38
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1049.56.27
linux-5.15.139/kernel-huge - update to 5.15.139
linux-5.15.139/kernel-modules - update to 5.15.139
linux-5.15.139/kernel-generic - update to 5.15.139
linux-5.15.139/kernel-headers - update to 5.15.139_smp
kernel - update to 6.1.41-63.109
linux-image-6.2.0-36-generic-lpae (Ubuntu package) - update to 6.2.0-36.37~22.04.1
linux-image-6.2.0-36-generic-64k (Ubuntu package) - update to 6.2.0-36.37~22.04.1
linux-image-6.2.0-36-generic (Ubuntu package) - update to 6.2.0-36.37~22.04.1
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 6.2.0.36.37~22.04.14
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.36.37~22.04.14
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.2.0.36.37~22.04.14
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 6.2.0.36.37~22.04.14
linux-image-6.2.0-1008-starfive (Ubuntu package) - update to 6.2.0-1008.9
linux-image-starfive (Ubuntu package) - addressed in versions 6.2.0.1008.11, 6.2.0.1009.10~22.04.2
linux-image-6.2.0-1009-starfive (Ubuntu package) - update to 6.2.0-1009.10~22.04.1
linux-image-6.2.0-1011-nvidia (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package) - update to 6.2.0-1011.11
linux-image-nvidia-6.2 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-nvidia-hwe-22.04 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-6.2.0-1015-oracle (Ubuntu package) - update to 6.2.0-1015.15
linux-image-6.2.0-1015-aws (Ubuntu package) - update to 6.2.0-1015.15~22.04.1
linux-image-6.2.0-1016-kvm (Ubuntu package) - update to 6.2.0-1016.16
linux-image-6.2.0-1016-azure (Ubuntu package) - update to 6.2.0-1016.16~22.04.1
linux-image-6.2.0-1016-lowlatency (Ubuntu package) - update to 6.2.0-1016.16~22.04.1
linux-image-6.2.0-1016-lowlatency-64k (Ubuntu package) - update to 6.2.0-1016.16~22.04.1
linux-image-6.2.0-1016-azure-fde (Ubuntu package) - update to 6.2.0-1016.16~22.04.1.1
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - update to 6.2.0.1016.16~22.04.13
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.1016.16~22.04.13
linux-image-6.2.0-1016-raspi (Ubuntu package) - update to 6.2.0-1016.18
linux-image-6.2.0-1018-gcp (Ubuntu package) - update to 6.2.0-1018.20~22.04.1

• https://github.com/torvalds/linux/commit/a282a2f10539dce2aa619e71e1817570d557fc97
• https://github.com/google/security-research/security/advisories/GHSA-jg27-jx6w-xwph
• https://www.spinics.net/lists/ceph-devel/msg57909.html
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a282a2f10539dce2aa619e71e1817570d557fc97

• Remote code execution in Linux kernel Ceph filesystem
• Ubuntu update for linux
• Ubuntu update for linux-hwe-5.15
• Ubuntu update for linux-raspi
• Ubuntu update for linux-intel-iotg
• Ubuntu update for linux-intel-iotg-5.15
• Ubuntu update for linux-nvidia-6.2
• Ubuntu update for linux
• Slackware Linux update for kernel
• Ubuntu update for linux-starfive-6.2
• Amazon Linux AMI update for kernel
• Anolis OS update for kernel(RHCK)4.18