CVE-2023-2007

🗓️ 24 Apr 2023 00:00:00Reported by redhatType

DPT I2O Controller driver lacks proper locking, allowing privilege escalation and arbitrary code execution.

Reporter	Title	Published	Views	Family All 303
ATTACKERKB	CVE-2023-2007	24 Apr 202323:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в linux-5.10	19 May 202514:38	–	astralinux
CBLMariner	CVE-2023-2007 affecting package kernel for versions less than 5.15.126.1-1	30 Aug 202315:15	–	cbl_mariner
Circl	CVE-2023-2007	19 Jan 202418:32	–	circl
CNNVD	DPT I2O Controller driver 安全漏洞	24 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-2007	24 Apr 202300:00	–	cvelist
Debian	[SECURITY] [DLA 3508-1] linux security update	27 Jul 202319:06	–	debian
Debian	[SECURITY] [DLA 3623-1] linux-5.10 security update	19 Oct 202321:24	–	debian
Debian	[SECURITY] [DSA 5480-1] linux security update	18 Aug 202319:01	–	debian
Debian CVE	CVE-2023-2007	24 Apr 202300:00	–	debiancve

NVD

Vulners

Node

linux linux_kernelRange<6.0

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp solidfire_&_hci_management_nodeMatch-

[
  {
    "vendor": "n/a",
    "product": "Linux kernel's DPT I2O Controller driver",
    "versions": [
      {
        "version": "Fixed in kernel v6.0-rc1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/07/msg00030.html
github	www.github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0
debian	www.debian.org/security/2023/dsa-5480
lists	www.lists.debian.org/debian-lts-announce/2023/10/msg00027.html
security	www.security.netapp.com/advisory/ntap-20240119-0011/

21 Nov 2024 07:57Current

8High risk

Vulners AI Score8

CVSS 3.17.8

EPSS0.00036