CVE-2023-2007

Updated: 2024-11-30 02:41:20.844916

Description:

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Not Vulnerable 2024-01-19 16:11:09
AlmaLinux 9.2 FIPS kernel 5.14.0 7.8 HIGH Not Vulnerable 2024-01-19 16:10:08
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-06-15 09:07:53
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2023-11-03 09:32:57
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2023-08-29 04:24:13
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2023-08-29 04:24:13
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-06-15 09:07:53
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-06-15 09:07:53
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.8 HIGH Released CLSA-2023:1689788960 2023-07-19 14:05:59
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Released CLSA-2023:1684277390 2023-05-16 21:13:47
Total: 11