8.2
High
CVE-2023-2008 A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler
Description
A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel udmabuf device driver | Versions not published | |
| kernel 5.19 | earliest → < 5.19 | 5.19 |
| kernel 5.16 | 5.16 → < 5.18.8 | 5.18.8 |
| kernel 5.11 | 5.11 → < 5.15.51 | 5.15.51 |
| kernel 5.5 | 5.5 → < 5.10.127 | 5.10.127 |
| kernel 4.20 | 4.20 → < 5.4.202 | 5.4.202 |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published |