CVE-2023-22998

Updated: 2026-02-27 02:13:41.823367

Description:

In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-21 04:11:59 This flaw exists only in the virtio‑gpu DRM driver and is reachable only if a guest is explicitly ...
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-03-06 07:40:28 Ignored due to low severity
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2023-09-19 05:07:29 Ignored due to low severity
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1695715460 2023-09-26 05:12:47
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1695716575 2023-09-26 05:12:47
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-10-08 06:17:28 Ignored due to low severity
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-03-06 07:40:28 Ignored due to low severity
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-10-08 06:17:28 Ignored due to low severity
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-03-06 07:40:28 Ignored due to low severity
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Ignored 2023-03-06 07:40:28 Ignored due to low severity
Total: 12