PT-2022-6558 · Linux+3 · Linux Kernel+3

Lucas Leong + 1 · Published 2022-04-01 · Updated 2026-05-26 · CVE-2023-2007

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue results from the lack of proper locking when performing operations on an object within the DPT I2O Controller driver. This can be leveraged by an attacker, in conjunction with other vulnerabilities, to escalate privileges and execute arbitrary code in the context of the kernel. The vulnerability is related to the virt to bus() and bus to virt() functions of the dpt i2o driver in Linux operating systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Locking

Time Of Check To Time Of Use

Weakness Enumeration

CWE-667

CWE-367

Related Identifiers

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2022-2922

ALT-PU-2022-2925

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-26377

BDU:2023-02408

CVE-2023-2007

DLA-3508-1

DLA-3623-1

DSA-5480-1

OESA-2023-1274

OESA-2023-1275

OESA-2023-1276

OESA-2023-1277

OPENSUSE-SU-2023_3599-1

OPENSUSE-SU-2023_3599-2

OPENSUSE-SU-2023_3600-1

OPENSUSE-SU-2023_3600-2

OPENSUSE-SU-2023_3656-1

OPENSUSE-SU-2023_3680-1

OPENSUSE-SU-2023_3682-1

OPENSUSE-SU-2023_3683-1

OPENSUSE-SU-2023_3683-2

OPENSUSE-SU-2023_3684-1

OPENSUSE-SU-2023_3704-1

OPENSUSE-SU-2023_3704-2

OPENSUSE-SU-2023_3964-1

OPENSUSE-SU-2023_3969-1

OPENSUSE-SU-2023_3971-1

OPENSUSE-SU-2023_3988-1

SUSE-SU-2023:3599-1

SUSE-SU-2023:3599-2

SUSE-SU-2023:3600-1

SUSE-SU-2023:3600-2

SUSE-SU-2023:3601-1

SUSE-SU-2023:3656-1

SUSE-SU-2023:3680-1

SUSE-SU-2023:3681-1

SUSE-SU-2023:3682-1

SUSE-SU-2023:3684-1

SUSE-SU-2023:3687-1

SUSE-SU-2023:3705-1

SUSE-SU-2023:3785-1

SUSE-SU-2023:3964-1

SUSE-SU-2023:3969-1

SUSE-SU-2023:3971-1

SUSE-SU-2023:3988-1

SUSE-SU-2023:4028-1

ZDI-23-440

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Suse

References · 237

• https://github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0 · Patch
• https://osv.dev/vulnerability/OESA-2023-1276 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-440 · Security Note
• https://ubuntu.com/security/CVE-2023-2007 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3656-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2269 · Security Note
• https://osv.dev/vulnerability/DLA-3508-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3705-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3599-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2176 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-2007 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:3687-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-2007 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-1998 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:3988-1 · Vendor Advisory