CVE-2023-52463
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Feb 23, 2024
CISA due date
—
Cloudanix analysis
A flaw in Linux can make computers crash when someone tries to change certain low-level boot settings files that the hardware does not fully support.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Patch
- Effort
- Medium
- Patch risk
- Low
What it actually does
A missing permission check in efivarfs allows remounting as read-write when firmware lacks SetVariable support, resulting in a NULL pointer dereference crash on variable write attempts due to the absent callback.
Why it matters to the business
Affected Linux systems risk kernel crashes and service disruption from local remount attempts on EFI variable storage, increasing downtime and requiring urgent patching across fleets.
How an attack unfolds
A local attacker remounts the efivarfs filesystem read-write then invokes a write operation such as efi-updatevar, causing the kernel to dereference a NULL callback and panic.
How to fix it
Upgrade to a kernel containing commit 94c742324ed7e42c5bd6a9ed22e4ec6d764db4d8 or later; keep efivarfs mounted read-only on systems whose firmware does not implement SetVariable at runtime.
How to confirm the fix worked
Confirm the running kernel includes the referenced commit, then verify that remount attempts to rw are rejected with an error when SetVariable is unsupported by firmware.
Typical attack path
- Obtain local shell or process execution on the target host
- Issue mount -o remount,rw on the efivarfs mount point
- Execute an EFI variable write command or API call
- Trigger kernel NULL pointer dereference and crash
How to detect it
Search kernel logs for oops traces referencing efivar_entry_set_get_size or efivarfs_file_write together with NULL pointer dereference; correlate with audit or syslog entries showing remount,rw on efivarfs.
- Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
- efivar_entry_set_get_size
- efivarfs_file_write
- mount -o remount,rw /sys/firmware/efi/efivars
What your security team should do
- Apply the fixed kernel version across all affected systems without delay
- Audit local user permissions to limit unnecessary remount capabilities
- Add monitoring for efivarfs remount operations in system logs
The record
In the Linux kernel, the following vulnerability has been resolved: efivarfs: force RO when remounting if SetVariable is not supported If SetVariable at runtime is not supported by the firmware we never assign a callback for that function. At the same time mount the efivarfs as RO so no one can call that. However, we never check the permission flags when someone remounts the filesystem as RW. As a result this leads to a crash looking like this: $ mount -o remount,rw /sys/firmware/efi/efivars $ efi-updatevar -f PK.auth PK [ 303.279166] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 303.280482] Mem abort info: [ 303.280854] ESR = 0x0000000086000004 [ 303.281338] EC = 0x21: IABT (current EL), IL = 32 bits [ 303.282016] SET = 0, FnV = 0 [ 303.282414] EA = 0, S1PTW = 0 [ 303.282821] FSC = 0x04: level 0 translation fault [ 303.283771] user pgtable: 4k pages, 48-bit VAs, pgdp=000000004258c000 [ 303.284913] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000 [ 303.286076] Internal error: Oops: 0000000086000004 [#1] PREEMPT SMP [ 303.286936] Modules linked in: qrtr tpm_tis tpm_tis_core crct10dif_ce arm_smccc_trng rng_core drm fuse ip_tables x_tables ipv6 [ 303.288586] CPU: 1 PID: 755 Comm: efi-updatevar Not tainted 6.3.0-rc1-00108-gc7d0c4695c68 #1 [ 303.289748] Hardware name: Unknown Unknown Product/Unknown Product, BIOS 2023.04-00627-g88336918701d 04/01/2023 [ 303.291150] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 303.292123] pc : 0x0 [ 303.292443] lr : efivar_set_variable_locked+0x74/0xec [ 303.293156] sp : ffff800008673c10 [ 303.293619] x29: ffff800008673c10 x28: ffff0000037e8000 x27: 0000000000000000 [ 303.294592] x26: 0000000000000800 x25: ffff000002467400 x24: 0000000000000027 [ 303.295572] x23: ffffd49ea9832000 x22: ffff0000020c9800 x21: ffff000002467000 [ 303.296566] x20: 0000000000000001 x19: 00000000000007fc x18: 0000000000000000 [ 303.297531] x17: 0000000000000000 x16: 0000000000000000 x15: 0000aaaac807ab54 [ 303.298495] x14: ed37489f673633c0 x13: 71c45c606de13f80 x12: 47464259e219acf4 [ 303.299453] x11: ffff000002af7b01 x10: 0000000000000003 x9 : 0000000000000002 [ 303.300431] x8 : 0000000000000010 x7 : ffffd49ea8973230 x6 : 0000000000a85201 [ 303.301412] x5 : 0000000000000000 x4 : ffff0000020c9800 x3 : 00000000000007fc [ 303.302370] x2 : 0000000000000027 x1 : ffff000002467400 x0 : ffff000002467000 [ 303.303341] Call trace: [ 303.303679] 0x0 [ 303.303938] efivar_entry_set_get_size+0x98/0x16c [ 303.304585] efivarfs_file_write+0xd0/0x1a4 [ 303.305148] vfs_write+0xc4/0x2e4 [ 303.305601] ksys_write+0x70/0x104 [ 303.306073] __arm64_sys_write+0x1c/0x28 [ 303.306622] invoke_syscall+0x48/0x114 [ 303.307156] el0_svc_common.constprop.0+0x44/0xec [ 303.307803] do_el0_svc+0x38/0x98 [ 303.308268] el0_svc+0x2c/0x84 [ 303.308702] el0t_64_sync_handler+0xf4/0x120 [ 303.309293] el0t_64_sync+0x190/0x194 [ 303.309794] Code: ???????? ???????? ???????? ???????? (????????) [ 303.310612] ---[ end trace 0000000000000000 ]--- Fix this by adding a .reconfigure() function to the fs operations which we can use to check the requested flags and deny anything that's not RO if the firmware doesn't implement SetVariable at runtime.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-abi-stablelists | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-core | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-cross-headers | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-debug | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-debug-core | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-debug-devel | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules-extra | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-devel | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-doc | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-headers | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-modules | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-modules-extra | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-rt | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-core | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-debug | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-core | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-devel | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-devel | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-kvm | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-modules | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-rt-modules-extra | 0 | 4.18.0-553.16.1.rt7.357.el8_10 |
| AlmaLinux:8 | kernel-tools | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs-devel | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-core | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | perf | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:8 | python3-perf | 0 | 4.18.0-553.16.1.el8_10 |
| AlmaLinux:9 | bpftool | 0 | 7.3.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel-matched | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-extra | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-abi-stablelists | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-cross-headers | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel-matched | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-extra | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-debug-uki-virt | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-devel-matched | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-doc | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-headers | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-modules | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-modules-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-modules-extra | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-extra | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-tools | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-uki-virt | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | libperf | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | perf | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | python3-perf | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | rtla | 0 | 5.14.0-427.35.1.el9_4 |
| AlmaLinux:9 | rv | 0 | 5.14.0-427.35.1.el9_4 |
| Debian:10 | linux-5.10 | 0 | 5.10.209-2~deb10u1 |
| Debian:11 | linux | 0 | 5.10.209-1 |
| Debian:12 | linux | 0 | 6.1.76-1 |
| Debian:13 | linux | 0 | 6.6.15-1 |
| Linux | Kernel | 5.8.0 | 5.10.209 |
| Red Hat:enterprise_linux:8::baseos | bpftool | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | bpftool-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-cross-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-doc | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-abi-stablelists | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-cross-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-doc | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-devel | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-devel | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-kvm | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules-extra | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-devel | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
Related vulnerabilities
- CVE-2025-68301 In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix… Also affects bpftool
- CVE-2025-68285 In the Linux kernel, the following vulnerability has been resolved: libceph: fix… Also affects bpftool
- CVE-2025-40277 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate… Also affects bpftool
- CVE-2025-40248 In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore… Also affects bpftool
- CVE-2025-40240 In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL… Also affects bpftool
- CVE-2025-40154 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel… Also affects bpftool
- CVE-2025-40096 In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix… Also affects bpftool
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects bpftool