PT-2022-6334 · Linux+8 · Linux Kernel+8

Published 2022-09-01 · Updated 2023-12-06 · CVE-2022-3623

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A vulnerability was found in the Linux Kernel, specifically in the function follow page pte of the file mm/gup.c of the component BPF. This issue is related to a race condition. The attack can be launched remotely, potentially allowing an attacker to cause a denial of service or gain unauthorized access to protected information.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALSA-2023:2148

ALSA-2023:2458

ALSA-2023:2736

ALSA-2023:2951

ALT-PU-2023-1066

ALT-PU-2023-7007

ALT-PU-2023-7682

BDU:2023-00946

CESA-2023_2736

CESA-2023_2951

CVE-2022-3623

DLA-3349-1

DSA-5324-1

MGASA-2022-0442

MGASA-2022-0443

OESA-2022-2045

OPENSUSE-SU-2022_3897-1

RHSA-2023:2148

RHSA-2023:2458

RHSA-2023:2736

RHSA-2023:2951

RHSA-2023_2148

RHSA-2023_2458

RHSA-2023_2736

RHSA-2023_2951

RHSA-2024:0724

SUSE-SU-2022:3897-1

USN-5793-1

USN-5793-2

USN-5793-3

USN-5793-4

USN-5851-1

USN-5860-1

USN-5876-1

USN-5877-1

USN-5917-1

USN-5934-1

USN-5939-1

USN-5940-1

USN-5951-1

USN-6000-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Suse

Ubuntu

References · 318

• https://security-tracker.debian.org/tracker/CVE-2022-3623 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2458.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20938 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5793-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-43750 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3535 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3623 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3623 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39842 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2045 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0394 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=fac35ba763ed07ba93154c95ffc0c4a55023707f · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2458.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42432 · Security Note