CVE-2023-5633
High · 7.8CVSS
7.8
EPSS
0.3%
Published
Oct 23, 2023
CISA due date
—
Cloudanix analysis
A bug in the Linux kernel lets someone already inside a certain type of virtual machine take over the whole system if a graphics acceleration feature is turned on.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Privilege Gain
- Component
- OS kernel
- Class
- Use After Free
- Remediation
- Patch
- Effort
- Low
- Patch risk
- Low
What it actually does
Use-after-free in Linux kernel surface memory object handling triggered by reference count adjustments from prior fixes, allowing local privilege escalation when 3D acceleration is enabled inside a VMware guest.
Why it matters to the business
A local attacker inside an affected virtual machine can gain full system privileges, risking lateral movement to the hypervisor or other guests and potential full environment compromise in virtualized deployments using VMware with 3D features.
How an attack unfolds
An attacker with access to a VMware guest that has 3D acceleration enabled crafts a sequence of graphics operations that manipulate surface objects; the flawed reference count changes leave a dangling pointer that is later dereferenced to corrupt kernel memory and execute arbitrary code with elevated privileges.
How to fix it
Upgrade the Linux kernel package to version 5.10.221-1 or newer on Debian 11 systems; disable 3D acceleration in VMware guests where upgrades cannot be applied immediately.
How to confirm the fix worked
Verify the running kernel version matches or exceeds the fixed release using uname or package manager queries; confirm 3D acceleration settings are disabled on unpatched guests via VMware configuration files.
Typical attack path
- Obtain local unprivileged access inside a VMware guest VM
- Ensure 3D acceleration is enabled on the guest
- Trigger graphics surface allocation and reference count operations that expose the use-after-free
- Use the resulting dangling pointer to corrupt kernel structures and escalate to root
How to detect it
Review kernel logs for use-after-free warnings or crashes involving surface or graphics memory objects; correlate with VMware guest activity showing unexpected privilege changes or process spawns from low-privileged users.
What your security team should do
- Prioritize kernel upgrades to 5.10.221-1 across all Debian 11 VMware guests within the next patching cycle
- Temporarily disable 3D acceleration on high-risk or internet-facing guests until patches are deployed
- Monitor for any new public exploit code given the low but stable EPSS score
The record
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-abi-stablelists | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-core | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-cross-headers | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-debug | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-debug-core | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-debug-devel | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-debug-modules | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-debug-modules-extra | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-devel | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-doc | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-modules | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-modules-extra | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-tools | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-tools-libs | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-tools-libs-devel | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-zfcpdump | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-zfcpdump-core | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | perf | 0 | 4.18.0-513.11.1.el8_9 |
| AlmaLinux:8 | python3-perf | 0 | 4.18.0-513.11.1.el8_9 |
| Debian:12 | linux | 0 | 6.1.76-1 |
| Debian:13 | linux | 0 | 6.5.8-1 |
| Mageia:9 | kernel | 0 | 6.5.11-5.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.5.11-2.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.10-37.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-50.mga9 |
| Red Hat:enterprise_linux:8::baseos | bpftool | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | bpftool-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-core | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-cross-headers | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-core | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-doc | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-headers | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules-extra | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | perf | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | perf-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | python3-perf | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | bpftool | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | bpftool-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-abi-stablelists | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-core | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-cross-headers | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debug | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-core | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules-extra | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-doc | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-headers | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-modules | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-modules-extra | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-tools | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-core | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-devel | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | perf | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | perf-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | python3-perf | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::crb | python3-perf-debuginfo | 0 | 0:4.18.0-513.11.1.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-core | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-core | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-devel | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-kvm | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-devel | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-kvm | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules-extra | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-core | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-core | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-devel | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-kvm | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-devel | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-kvm | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules-extra | 0 | 0:4.18.0-513.11.1.rt7.313.el8_9 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.2.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.2.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-362.18.1.el9_3 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-362.18.1.el9_3 |
Related vulnerabilities
- CVE-2025-68301 In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix… Also affects bpftool
- CVE-2025-68285 In the Linux kernel, the following vulnerability has been resolved: libceph: fix… Also affects bpftool
- CVE-2025-40277 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate… Also affects bpftool
- CVE-2025-40248 In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore… Also affects bpftool
- CVE-2025-40240 In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL… Also affects bpftool
- CVE-2025-40154 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel… Also affects bpftool
- CVE-2025-40096 In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix… Also affects bpftool
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects bpftool