Race condition in Linux kernel - CVE-2023-4732

Vulnerability identifier: #VU83479

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4732

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition caused by a BUG statement referencing pmd_t x within the pfn_swap_entry_to_page () function. A local user can exploit the race and crash the kernel.

Linux kernel
Anolis OS
Red Hat Enterprise Linux for Real Time
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Real Time for NFV
IBM Spectrum Copy Data Management
OpenShift Logging
Session Smart Router
IBM Security Verify Governance
IBM Cloud Pak for Watson AIOps
Technical Support Appliance
Storage Protect Plus Server
Red Hat OpenShift Container Platform
Juniper Secure Analytics (JSA)
kernel (Red Hat package)
kernel-modules
kernel-headers
kernel-devel
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
kernel
bpftool
kernel-modules-extra
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python3-perf
kernel-abi-stablelists
kernel-doc
kernel-rt (Red Hat package)
IBM Storage Scale System
IBM Qradar SIEM

Install updates from vendor's website.

IBM Spectrum Copy Data Management - update to 2.2.22.1
Red Hat OpenShift Container Platform - update to 4.12.47
OpenShift Logging - update to 5.7.10
Juniper Secure Analytics (JSA) - update to 7.5.0 UP8 IF03
Technical Support Appliance - update to 3.0.1
kernel (Red Hat package) - addressed in versions 4.18.0-477.36.1.el8_8, 4.18.0-513.5.1.el8_9
kernel-modules - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-headers - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-devel - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-debug-modules-extra - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-debug-modules - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-debug-devel - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-debug-core - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-debug - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-cross-headers - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-core - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
bpftool - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-modules-extra - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-tools - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-tools-libs - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-tools-libs-devel - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
perf - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
python3-perf - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-abi-stablelists - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-doc - addressed in versions 4.18.0-477.36.1.0.1, 4.18.0-513.18.1.0.1
kernel-rt (Red Hat package) - update to 4.18.0-513.5.1.rt7.307.el8_9
IBM Storage Scale System - addressed in versions 6.1.2.9, 6.1.9.2
Session Smart Router - addressed in versions 6.2.10, 6.3.7
IBM Qradar SIEM - update to 7.5.0 Update Pack 8 IF02
IBM Security Verify Governance - update to 10.0.2.0.4
Storage Protect Plus Server - update to 10.1.16.0

• https://access.redhat.com/security/cve/CVE-2023-4732
• https://bugzilla.redhat.com/show_bug.cgi?id=2236982
• https://access.redhat.com/errata/RHSA-2023:6901
• https://access.redhat.com/errata/RHSA-2023:7077

• Local denial of service in Linux kernel
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel
• Red Hat Enterprise Linux 8.8 Extended Update Support update for kernel
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Red Hat OpenShift Container Platform 4.12 update for golang
• Multiple vulnerabilities in IBM Storage Protect Plus
• Multiple vulnerabilities in IBM Storage Scale System
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in IBM Technical Support Appliance
• Anolis OS update for kernel
• Anolis OS update for kernel
• Juniper Session Smart Router update for third-party components