Vulnerability-Lookup

CVE-2023-45862 (GCVE-0-2023-45862)

Vulnerability from cvelistv5 – Published: 2023-10-14 00:00 – Updated: 2024-08-02 20:29

Summary

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://cdn.kernel.org/pub/linux/kernel/v6.x/Chan…
https://security.netapp.com/advisory/ntap-2023111…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T20:29:32.571Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231116-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-16T15:06:15.882Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef"
        },
        {
          "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231116-0004/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-45862",
    "datePublished": "2023-10-14T00:00:00.000Z",
    "dateReserved": "2023-10-14T00:00:00.000Z",
    "dateUpdated": "2024-08-02T20:29:32.571Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-45862",
      "date": "2026-09-16",
      "epss": "0.00282",
      "percentile": "0.20827"
    },
    "microsoft_vex": {
      "current_release_date": "2023-10-20T00:00:00.000Z",
      "cve": "CVE-2023-45862",
      "id": "msrc_CVE-2023-45862",
      "initial_release_date": "2023-10-01T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.",
      "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-45862.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-45862\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2023-10-14T21:15:45.180\",\"lastModified\":\"2026-06-17T06:29:40.670\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.\"},{\"lang\":\"es\",\"value\":\"Se descubri\u00f3 un problema en drivers/usb/storage/ene_ub6250.c para el controlador del lector ENE UB6250 en el kernel de Linux anterior a 6.2.5. Un objeto podr\u00eda potencialmente extenderse m\u00e1s all\u00e1 del final de una asignaci\u00f3n.\"}],\"affected\":[{\"source\":\"cve@mitre.org\",\"affectedData\":[{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.2.5\",\"matchCriteriaId\":\"23684754-3677-425D-8677-66C225B814FB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDDF61B7-EC5C-467C-B710-B89F502CD04F\"}]}]}],\"references\":[{\"url\":\"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Patch\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20231116-0004/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20231116-0004/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T14:52:14+00:00",
      "cve": "CVE-2023-45862",
      "id": "CVE-2023-45862",
      "initial_release_date": "2023-02-04T00:00:00+00:00",
      "product_status:fixed": "972",
      "product_status:known_affected": "173",
      "product_status:known_not_affected": "54",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drivers/usb/storage/ene_ub6250.c",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45862.json",
      "version": "3"
    }
  }
}

oesa-2023-1782

Vulnerability from osv_openeuler

Published

2023-11-03 11:06

Modified

2026-08-06 11:06

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cm4040_open() and reader_detach().(CVE-2022-44033)

An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event.(CVE-2022-45919)

VUL-0: CVE-2023-2593: kernel: Linux Kernel ksmbd Memory Exhaustion Denial-of-Service Vulnerability(CVE-2023-2593)

There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.(CVE-2023-2898)

An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur.(CVE-2023-31083)

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.(CVE-2023-31085)

VUL-0: CVE-2023-32246: kernel: Linux Kernel ksmbd RCU Callback Race Condition Local Privilege Escalation Vulnerability(CVE-2023-32246)

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.(CVE-2023-32254)

Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an unrelated Xen console action and the handling of a Xen console interrupt in an unprivileged guest. The closing of an event channel is e.g. triggered by removal of a paravirtual device on the other side. As this action will cause console messages to be issued on the other side quite often, the chance of triggering the deadlock is not neglectable. A (malicious) guest administrator could cause a denial of service (DoS) in a backend domain (other than dom0) by disabling a paravirtualized device. A malicious backend could cause DoS in a guest running a Linux kernel by disabling a paravirtualized device.(CVE-2023-34324)

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.(CVE-2023-39189)

A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.(CVE-2023-39192)

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.(CVE-2023-39193)

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.(CVE-2023-39194)

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.(CVE-2023-42754)

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.(CVE-2023-45862)

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.(CVE-2023-45863)

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.(CVE-2023-45871)

A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.

If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.

We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.

(CVE-2023-5717)

Severity

9.8 (Critical)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-44033	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-45919	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-2593	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-2898	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-31083	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-31085	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-32246	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-32254	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-34324	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-39189	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-39192	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-39193	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-39194	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-42754	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-45862	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-45863	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-45871	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-5717	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "python3-perf-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "perf-debuginfo-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-headers-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-tools-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "perf-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-devel-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "bpftool-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-tools-devel-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-debuginfo-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "python3-perf-debuginfo-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "bpftool-debuginfo-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-tools-debuginfo-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-source-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm",
          "kernel-debugsource-5.10.0-136.53.0.132.oe2203sp1.aarch64.rpm"
        ],
        "src": [
          "kernel-5.10.0-136.53.0.132.oe2203sp1.src.rpm"
        ],
        "x86_64": [
          "python3-perf-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-tools-devel-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-devel-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-headers-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "bpftool-debuginfo-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "bpftool-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "perf-debuginfo-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "python3-perf-debuginfo-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-debuginfo-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-source-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-tools-debuginfo-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "perf-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-debugsource-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm",
          "kernel-tools-5.10.0-136.53.0.132.oe2203sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP1",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.10.0-136.53.0.132.oe2203sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Critical"
  },
  "details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cm4040_open() and reader_detach().(CVE-2022-44033)\r\n\r\nAn issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event.(CVE-2022-45919)\r\n\r\nVUL-0: CVE-2023-2593: kernel: Linux Kernel ksmbd Memory Exhaustion Denial-of-Service Vulnerability(CVE-2023-2593)\r\n\r\nThere is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.(CVE-2023-2898)\r\n\r\nAn issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu-\u0026gt;proto is set. A NULL pointer dereference may occur.(CVE-2023-31083)\r\n\r\nAn issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd-\u0026gt;erasesize), used indirectly by ctrl_cdev_ioctl, when mtd-\u0026gt;erasesize is 0.(CVE-2023-31085)\r\n\r\nVUL-0: CVE-2023-32246: kernel: Linux Kernel ksmbd RCU Callback Race Condition Local Privilege Escalation Vulnerability(CVE-2023-32246)\r\n\r\nA flaw was found in the Linux kernel\u0026apos;s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.(CVE-2023-32254)\r\n\r\nClosing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an unrelated Xen console action and the handling of a Xen console interrupt in an unprivileged guest. The closing of an event channel is e.g. triggered by removal of a paravirtual device on the other side. As this action will cause console messages to be issued on the other side quite often, the chance of triggering the deadlock is not neglectable.\nA (malicious) guest administrator could cause a denial of service (DoS) in a backend domain (other than dom0) by disabling a paravirtualized device. A malicious backend could cause DoS in a guest running a Linux kernel by disabling a paravirtualized device.(CVE-2023-34324)\r\n\r\nA flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.(CVE-2023-39189)\r\n\r\nA flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.(CVE-2023-39192)\r\n\r\nA flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.(CVE-2023-39193)\r\n\r\nA flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.(CVE-2023-39194)\r\n\r\nA NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.(CVE-2023-42754)\r\n\r\nAn issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.(CVE-2023-45862)\r\n\r\nAn issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.(CVE-2023-45863)\r\n\r\nAn issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.(CVE-2023-45871)\r\n\r\nA heap out-of-bounds write vulnerability in the Linux kernel\u0026apos;s Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.\r\n\r\nIf perf_read_group() is called while an event\u0026apos;s sibling_list is smaller than its child\u0026apos;s sibling_list, it can increment or write to memory locations outside of the allocated buffer.\r\n\r\nWe recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.\r\n\r\n(CVE-2023-5717)",
  "id": "OESA-2023-1782",
  "modified": "2026-08-06T11:06:13Z",
  "published": "2023-11-03T11:06:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1782"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44033"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45919"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2593"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2898"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31083"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31085"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32246"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32254"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34324"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39189"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39192"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39193"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39194"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42754"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45862"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45863"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45871"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5717"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2022-44033",
    "CVE-2022-45919",
    "CVE-2023-2593",
    "CVE-2023-2898",
    "CVE-2023-31083",
    "CVE-2023-31085",
    "CVE-2023-32246",
    "CVE-2023-32254",
    "CVE-2023-34324",
    "CVE-2023-39189",
    "CVE-2023-39192",
    "CVE-2023-39193",
    "CVE-2023-39194",
    "CVE-2023-42754",
    "CVE-2023-45862",
    "CVE-2023-45863",
    "CVE-2023-45871",
    "CVE-2023-5717"
  ]
}

RHSA-2024:0723

Vulnerability from csaf_redhat - Published: 2024-02-07 16:32 - Updated: 2026-08-25 16:57

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

An out-of-bounds memory access flaw was found in the Linux kernel ENE SD/MS Card reader driver. This issue occurs when using a malicious USB device, which could allow a local user to crash the system.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Fixed: 201 products

https://access.redhat.com/errata/RHSA-2024:0723

Open the full advisory

RHSA-2024:0724

Vulnerability from csaf_redhat - Published: 2024-02-07 16:33 - Updated: 2026-08-25 16:57

Summary

Red Hat Security Advisory: kernel security and bug fix update

Severity

Important

Scope

57 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Fixed: 129 products

https://access.redhat.com/errata/RHSA-2024:0724

Open the full advisory

RHSA-2024:0725

Vulnerability from csaf_redhat - Published: 2024-02-07 16:21 - Updated: 2026-08-25 16:57

Summary

Red Hat Security Advisory: kernel-rt security update

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Fixed: 34 products

https://access.redhat.com/errata/RHSA-2024:0725

Open the full advisory

RHSA-2024:1404

Vulnerability from csaf_redhat - Published: 2024-03-19 17:43 - Updated: 2026-08-25 16:57

Summary

Red Hat Security Advisory: kernel security and bug fix update

Severity

Important

Scope

37 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Fixed: 120 products

https://access.redhat.com/errata/RHSA-2024:1404

Open the full advisory

SUSE-SU-2023:4343-1

Vulnerability from csaf_suse - Published: 2023-11-02 14:34 - Updated: 2023-11-02 14:34

Summary

Security update for the Linux Kernel

Severity

Important

Scope

9 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 35 products

Open the full advisory

SUSE-SU-2023:4345-1

Vulnerability from csaf_suse - Published: 2023-11-02 14:35 - Updated: 2023-11-02 14:35

Summary

Security update for the Linux Kernel

Severity

Important

Scope

9 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 34 products

Open the full advisory

SUSE-SU-2023:4346-1

Vulnerability from csaf_suse - Published: 2023-11-02 14:35 - Updated: 2023-11-02 14:35

Summary

Security update for the Linux Kernel

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 12 products

Open the full advisory

SUSE-SU-2023:4347-1

Vulnerability from csaf_suse - Published: 2023-11-02 14:36 - Updated: 2023-11-02 14:36

Summary

Security update for the Linux Kernel

Severity

Important

Scope

17 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 118 products

Open the full advisory

SUSE-SU-2023:4348-1

Vulnerability from csaf_suse - Published: 2023-11-02 14:38 - Updated: 2023-11-02 14:38

Summary

Security update for the Linux Kernel

Severity

Important

Scope

11 vulnerabilities in this advisory, including CVE-2023-45862.

CVE-2023-45862

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 176 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-45862 (GCVE-0-2023-45862)

Vulnerability from osv_openeuler

Tags

Sightings

Nomenclature

Related by attack behaviour