Lucene search

Ubuntu.comUB:CVE-2023-22997

HistoryFeb 28, 2023 - 12:00 a.m.

CVE-2023-22997

2023-02-2800:00:00

ubuntu.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

8.2%

JSON

In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets
the module_get_next_page return value (expects it to be NULL in the error
case, whereas it is actually an error pointer).

Bugs

<https://bugzilla.redhat.com/show_bug.cgi?id=2182422>

OSVersionArchitecturePackageVersionFilename
ubuntu22.10noarchlinux< 5.19.0-40.41UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1023.24UNKNOWN
ubuntu22.10noarchlinux-azure< 5.19.0-1023.24UNKNOWN
ubuntu22.04noarchlinux-azure-5.19< 5.19.0-1023.24~22.04.1UNKNOWN
ubuntu22.10noarchlinux-gcp< 5.19.0-1020.22UNKNOWN
ubuntu24.04noarchlinux-gke< anyUNKNOWN
ubuntu22.04noarchlinux-hwe-5.19< 5.19.0-40.41~22.04.1UNKNOWN
ubuntu22.10noarchlinux-kvm< 5.19.0-1021.22UNKNOWN
ubuntu22.10noarchlinux-lowlatency< 5.19.0-1022.23UNKNOWN
ubuntu22.04noarchlinux-lowlatency-hwe-5.19< 5.19.0-1022.23~22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.10	noarch	linux	< 5.19.0-40.41	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1023.24	UNKNOWN
ubuntu	22.10	noarch	linux-azure	< 5.19.0-1023.24	UNKNOWN
ubuntu	22.04	noarch	linux-azure-5.19	< 5.19.0-1023.24~22.04.1	UNKNOWN
ubuntu	22.10	noarch	linux-gcp	< 5.19.0-1020.22	UNKNOWN
ubuntu	24.04	noarch	linux-gke	< any	UNKNOWN
ubuntu	22.04	noarch	linux-hwe-5.19	< 5.19.0-40.41~22.04.1	UNKNOWN
ubuntu	22.10	noarch	linux-kvm	< 5.19.0-1021.22	UNKNOWN
ubuntu	22.10	noarch	linux-lowlatency	< 5.19.0-1022.23	UNKNOWN
ubuntu	22.04	noarch	linux-lowlatency-hwe-5.19	< 5.19.0-1022.23~22.04.1	UNKNOWN

Rows per page:

1-10 of 151

References

cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2

git.kernel.org/linus/45af1d7aae7d5520d2858f8517a1342646f015db

github.com/torvalds/linux/commit/45af1d7aae7d5520d2858f8517a1342646f015db

launchpad.net/bugs/cve/CVE-2023-22997

nvd.nist.gov/vuln/detail/CVE-2023-22997

security-tracker.debian.org/tracker/CVE-2023-22997

ubuntu.com/security/notices/USN-6024-1

www.cve.org/CVERecord?id=CVE-2023-22997

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

8.2%

JSON

Related for UB:CVE-2023-22997