{"api_version":"1","generated_at":"2026-04-22T23:53:27+00:00","cve":"CVE-2023-35001","urls":{"html":"https://cve.report/CVE-2023-35001","api":"https://cve.report/api/cve/CVE-2023-35001.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-35001","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-35001"},"summary":{"title":"CVE-2023-35001","description":"Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace","state":"PUBLIC","assigner":"security@ubuntu.com","published_at":"2023-07-05 19:15:00","updated_at":"2023-09-11 19:15:00"},"problem_types":["CWE-787"],"metrics":[],"references":[{"url":"https://security.netapp.com/advisory/ntap-20230824-0007/","name":"https://security.netapp.com/advisory/ntap-20230824-0007/","refsource":"MISC","tags":[],"title":"CVE-2023-35001 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.openwall.com/lists/oss-security/2023/07/05/3","name":"https://www.openwall.com/lists/oss-security/2023/07/05/3","refsource":"MISC","tags":[],"title":"oss-security - CVE-2023-35001 - Linux kernel nf_tables nft_byteorder_eval OOB\n read/write","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","name":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","refsource":"MISC","tags":[],"title":"Kernel Live Patch Security Notice LSN-0097-1 ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/","refsource":"MISC","tags":[],"title":"[SECURITY] Fedora 38 Update: kernel-headers-6.4.4-200.fc38 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/","name":"https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/","refsource":"MISC","tags":[],"title":"[PATCH] netfilter: nf_tables: prevent OOB access in nft_byteorder_eval","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/","refsource":"MISC","tags":[],"title":"[SECURITY] Fedora 37 Update: kernel-tools-6.4.4-100.fc37 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/05/3","name":"http://www.openwall.com/lists/oss-security/2023/07/05/3","refsource":"MISC","tags":[],"title":"oss-security - CVE-2023-35001 - Linux kernel nf_tables nft_byteorder_eval OOB\n read/write","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html","name":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html","refsource":"MISC","tags":[],"title":"Kernel Live Patch Security Notice LSN-0096-1 ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","name":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","refsource":"MISC","tags":[],"title":"[SECURITY] [DLA 3512-1] linux-5.10 security update","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.debian.org/security/2023/dsa-5453","name":"https://www.debian.org/security/2023/dsa-5453","refsource":"MISC","tags":[],"title":"Debian -- Security Information -- DSA-5453-1 linux","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35001","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35001","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"35001","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"35001","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"35001","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"38","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"35001","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"3.13","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2023-35001","qid":"160912","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-5069)"},{"cve":"CVE-2023-35001","qid":"160934","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-5244)"},{"cve":"CVE-2023-35001","qid":"160949","title":"Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12842)"},{"cve":"CVE-2023-35001","qid":"160971","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-5622)"},{"cve":"CVE-2023-35001","qid":"199604","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6246-1)"},{"cve":"CVE-2023-35001","qid":"199607","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6247-1)"},{"cve":"CVE-2023-35001","qid":"199608","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6250-1)"},{"cve":"CVE-2023-35001","qid":"199610","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6248-1)"},{"cve":"CVE-2023-35001","qid":"199612","title":"Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6255-1)"},{"cve":"CVE-2023-35001","qid":"199613","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6251-1)"},{"cve":"CVE-2023-35001","qid":"199615","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6252-1)"},{"cve":"CVE-2023-35001","qid":"199617","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6254-1)"},{"cve":"CVE-2023-35001","qid":"199618","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6260-1)"},{"cve":"CVE-2023-35001","qid":"199623","title":"Ubuntu Security Notification for Linux kernel (IoT) Vulnerabilities (USN-6261-1)"},{"cve":"CVE-2023-35001","qid":"199651","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6285-1)"},{"cve":"CVE-2023-35001","qid":"199874","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6460-1)"},{"cve":"CVE-2023-35001","qid":"242062","title":"Red Hat Update for kpatch-patch (RHSA-2023:5221)"},{"cve":"CVE-2023-35001","qid":"242068","title":"Red Hat Update for kernel (RHSA-2023:5238)"},{"cve":"CVE-2023-35001","qid":"242070","title":"Red Hat Update for kernel security (RHSA-2023:5244)"},{"cve":"CVE-2023-35001","qid":"242073","title":"Red Hat Update for kpatch-patch (RHSA-2023:5235)"},{"cve":"CVE-2023-35001","qid":"242075","title":"Red Hat Update for kernel-rt (RHSA-2023:5255)"},{"cve":"CVE-2023-35001","qid":"242141","title":"Red Hat Update for kpatch-patch (RHSA-2023:5548)"},{"cve":"CVE-2023-35001","qid":"242142","title":"Red Hat Update for kpatch-patch (RHSA-2023:5575)"},{"cve":"CVE-2023-35001","qid":"242143","title":"Red Hat Update for kpatch-patch (RHSA-2023:5574)"},{"cve":"CVE-2023-35001","qid":"242151","title":"Red Hat Update for kernel security (RHSA-2023:5627)"},{"cve":"CVE-2023-35001","qid":"242154","title":"Red Hat Update for kernel (RHSA-2023:5604)"},{"cve":"CVE-2023-35001","qid":"242157","title":"Red Hat Update for kernel-rt (RHSA-2023:5603)"},{"cve":"CVE-2023-35001","qid":"242158","title":"Red Hat Update for kernel (RHSA-2023:5622)"},{"cve":"CVE-2023-35001","qid":"242159","title":"Red Hat Update for kernel-rt (RHSA-2023:5621)"},{"cve":"CVE-2023-35001","qid":"243055","title":"Red Hat Update for kernel (RHSA-2024:1268)"},{"cve":"CVE-2023-35001","qid":"243057","title":"Red Hat Update for kpatch-patch (RHSA-2024:1278)"},{"cve":"CVE-2023-35001","qid":"243058","title":"Red Hat Update for kernel-rt (RHSA-2024:1269)"},{"cve":"CVE-2023-35001","qid":"257259","title":"CentOS Security Update for kernel"},{"cve":"CVE-2023-35001","qid":"284333","title":"Fedora Security Update for kernel (FEDORA-2023-e4e985b5dd)"},{"cve":"CVE-2023-35001","qid":"284334","title":"Fedora Security Update for kernel (FEDORA-2023-3661f028b8)"},{"cve":"CVE-2023-35001","qid":"355566","title":"Amazon Linux Security Advisory for kernel : ALAS-2023-1783"},{"cve":"CVE-2023-35001","qid":"355582","title":"Amazon Linux Security Advisory for kernel : ALAS2-2023-2130"},{"cve":"CVE-2023-35001","qid":"355591","title":"Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2023-024"},{"cve":"CVE-2023-35001","qid":"355613","title":"Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2023-049"},{"cve":"CVE-2023-35001","qid":"355616","title":"Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2023-037"},{"cve":"CVE-2023-35001","qid":"355632","title":"Amazon Linux Security Advisory for kernel : ALAS2023-2023-251"},{"cve":"CVE-2023-35001","qid":"378701","title":"Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2023:0030)"},{"cve":"CVE-2023-35001","qid":"378710","title":"Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0079)"},{"cve":"CVE-2023-35001","qid":"379043","title":"Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0136)"},{"cve":"CVE-2023-35001","qid":"390290","title":"Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2023-0023)"},{"cve":"CVE-2023-35001","qid":"6000130","title":"Debian Security Update for linux-5.10 (DLA 3512-1)"},{"cve":"CVE-2023-35001","qid":"6000218","title":"Debian Security Update for linux (DSA 5453-1)"},{"cve":"CVE-2023-35001","qid":"6000429","title":"Debian Security Update for linux (DLA 3710-1)"},{"cve":"CVE-2023-35001","qid":"6140409","title":"AWS Bottlerocket Security Update for kernel (GHSA-qf27-gcxq-j6xr)"},{"cve":"CVE-2023-35001","qid":"673354","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2843)"},{"cve":"CVE-2023-35001","qid":"673372","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2787)"},{"cve":"CVE-2023-35001","qid":"673449","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2898)"},{"cve":"CVE-2023-35001","qid":"673496","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2860)"},{"cve":"CVE-2023-35001","qid":"673498","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-3132)"},{"cve":"CVE-2023-35001","qid":"673604","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2811)"},{"cve":"CVE-2023-35001","qid":"673970","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2879)"},{"cve":"CVE-2023-35001","qid":"754281","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:3349-1)"},{"cve":"CVE-2023-35001","qid":"754829","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 24 for SLE 15 SP3) (SUSE-SU-2023:3594-1)"},{"cve":"CVE-2023-35001","qid":"754830","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (SUSE-SU-2023:3596-1)"},{"cve":"CVE-2023-35001","qid":"754831","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 27 for SLE 15 SP3) (SUSE-SU-2023:3595-1)"},{"cve":"CVE-2023-35001","qid":"754834","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 25 for SLE 15 SP3) (SUSE-SU-2023:3607-1)"},{"cve":"CVE-2023-35001","qid":"754835","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (SUSE-SU-2023:3603-1)"},{"cve":"CVE-2023-35001","qid":"754838","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 38 for SLE 15 SP2) (SUSE-SU-2023:3622-1)"},{"cve":"CVE-2023-35001","qid":"754839","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 37 for SLE 15 SP2) (SUSE-SU-2023:3621-1)"},{"cve":"CVE-2023-35001","qid":"754840","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 36 for SLE 15 SP2) (SUSE-SU-2023:3620-1)"},{"cve":"CVE-2023-35001","qid":"754841","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 29 for SLE 15 SP3) (SUSE-SU-2023:3623-1)"},{"cve":"CVE-2023-35001","qid":"754842","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 35 for SLE 15 SP2) (SUSE-SU-2023:3612-1)"},{"cve":"CVE-2023-35001","qid":"754844","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 32 for SLE 15 SP3) (SUSE-SU-2023:3628-1)"},{"cve":"CVE-2023-35001","qid":"754845","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 30 for SLE 15 SP3) (SUSE-SU-2023:3627-1)"},{"cve":"CVE-2023-35001","qid":"754846","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 34 for SLE 15 SP3) (SUSE-SU-2023:3632-1)"},{"cve":"CVE-2023-35001","qid":"754847","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 33 for SLE 15 SP3) (SUSE-SU-2023:3631-1)"},{"cve":"CVE-2023-35001","qid":"754848","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2023:3630-1)"},{"cve":"CVE-2023-35001","qid":"754851","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 14 for SLE 15 SP4) (SUSE-SU-2023:3653-1)"},{"cve":"CVE-2023-35001","qid":"754852","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 12 for SLE 15 SP4) (SUSE-SU-2023:3648-1)"},{"cve":"CVE-2023-35001","qid":"754853","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 11 for SLE 15 SP4) (SUSE-SU-2023:3647-1)"},{"cve":"CVE-2023-35001","qid":"754854","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 8 for SLE 15 SP4) (SUSE-SU-2023:3644-1)"},{"cve":"CVE-2023-35001","qid":"754857","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:3659-1)"},{"cve":"CVE-2023-35001","qid":"754859","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 13 for SLE 15 SP4) (SUSE-SU-2023:3657-1)"},{"cve":"CVE-2023-35001","qid":"754870","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP4) (SUSE-SU-2023:3677-1)"},{"cve":"CVE-2023-35001","qid":"754871","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:3676-1)"},{"cve":"CVE-2023-35001","qid":"754872","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4) (SUSE-SU-2023:3675-1)"},{"cve":"CVE-2023-35001","qid":"754873","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2023:3671-1)"},{"cve":"CVE-2023-35001","qid":"754874","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP4) (SUSE-SU-2023:3668-1)"},{"cve":"CVE-2023-35001","qid":"941249","title":"AlmaLinux Security Update for kernel (ALSA-2023:5069)"},{"cve":"CVE-2023-35001","qid":"941254","title":"AlmaLinux Security Update for kernel-rt (ALSA-2023:5091)"},{"cve":"CVE-2023-35001","qid":"941276","title":"AlmaLinux Security Update for kernel (ALSA-2023:5244)"},{"cve":"CVE-2023-35001","qid":"961015","title":"Rocky Linux Security Update for kernel-rt (RLSA-2023:5091)"},{"cve":"CVE-2023-35001","qid":"961022","title":"Rocky Linux Security Update for kernel (RLSA-2023:5244)"}]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2023-35001","ASSIGNER":"security@ubuntu.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-787","cweId":"CWE-787"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Linux","product":{"product_data":[{"product_name":"Linux Kernel","version":{"version_data":[{"version_affected":"=","version_value":"v3.13-rc1"}]}}]}}]}},"references":{"reference_data":[{"url":"https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/","refsource":"MISC","name":"https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/"},{"url":"https://www.openwall.com/lists/oss-security/2023/07/05/3","refsource":"MISC","name":"https://www.openwall.com/lists/oss-security/2023/07/05/3"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/05/3","refsource":"MISC","name":"http://www.openwall.com/lists/oss-security/2023/07/05/3"},{"url":"https://www.debian.org/security/2023/dsa-5453","refsource":"MISC","name":"https://www.debian.org/security/2023/dsa-5453"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/","refsource":"MISC","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/","refsource":"MISC","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/"},{"url":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html","refsource":"MISC","name":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html"},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","refsource":"MISC","name":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"},{"url":"https://security.netapp.com/advisory/ntap-20230824-0007/","refsource":"MISC","name":"https://security.netapp.com/advisory/ntap-20230824-0007/"},{"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","refsource":"MISC","name":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html"}]},"credits":[{"lang":"en","value":"Tanguy Dubroca"}],"impact":{"cvss":[{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH"}]}},"nvd":{"publishedDate":"2023-07-05 19:15:00","lastModifiedDate":"2023-09-11 19:15:00","problem_types":["CWE-787"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:3.13:rc1:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}