{"schema_version":"1","data":[{"id":24300,"advisory_id":"ea307714-10c9-4998-874d-fc529d827a56","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6932","source_published_at":"2023-12-19T14:09:15.662+00:00","published_at":"2026-10-25T06:33:12.139726+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-6932"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's ipv4: igmp component","summary":"A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.","evidence":"cve:CVE-2023-6932","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6932","aliases":["CVE-2023-6932"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"2.6.12","lessThan":"6.7","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T22:15:25.739Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e2b706c691905fe78468c361aaabc719d0a496f1","https://kernel.dance/e2b706c691905fe78468c361aaabc719d0a496f1","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e2b706c691905fe78468c361aaabc719d0a496f1","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/e2b706c691905fe78468c361aaabc719d0a496f1","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:42:08.680Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6932","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-05-10T04:00:14.201619Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-25T16:34:33.461Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:25.739Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2024-02-08T16:06:01.000Z"}}},"related_cves":[{"value":"CVE-2023-6932","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24298,"advisory_id":"ecb64a1a-98ac-4d88-b703-9c0ced78dc73","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6817","source_published_at":"2023-12-18T14:37:05.986+00:00","published_at":"2026-10-25T06:33:10.585695+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-6817"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","summary":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free. We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.","evidence":"cve:CVE-2023-6817","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6817","aliases":["CVE-2023-6817"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"5.6","lessThan":"6.7","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T22:15:22.336Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a","https://kernel.dance/317eb9685095678f2c9f5a8189de698c5354316a","https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/317eb9685095678f2c9f5a8189de698c5354316a","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/22/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/22/13","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:42:08.222Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:22.336Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2024-02-08T16:05:57.106Z"}}},"related_cves":[{"value":"CVE-2023-6817","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24290,"advisory_id":"961437d5-aaa2-44cd-bfc8-887cb71f44f5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-5717","source_published_at":"2023-10-25T12:55:06.871+00:00","published_at":"2026-10-25T06:33:05.280315+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-5717"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component","summary":"A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer. We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.","evidence":"cve:CVE-2023-5717","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-5717","aliases":["CVE-2023-5717"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"4.4","lessThan":"6.6","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T22:07:12.236Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/events?id=32671e3799ca2e4590773fd0e63aaa4229e50c06","https://kernel.dance/32671e3799ca2e4590773fd0e63aaa4229e50c06","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/events?id=32671e3799ca2e4590773fd0e63aaa4229e50c06","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/32671e3799ca2e4590773fd0e63aaa4229e50c06","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:07:32.716Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-5717","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-05-10T04:00:16.642573Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-25T17:20:08.857Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:07:12.236Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2024-01-11T19:06:46.196Z"}}},"related_cves":[{"value":"CVE-2023-5717","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24286,"advisory_id":"b48e263d-85d4-4301-9f70-959b892a57df","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-5197","source_published_at":"2023-09-26T10:04:37.147+00:00","published_at":"2026-10-25T06:33:02.901062+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-5197"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","summary":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.","evidence":"cve:CVE-2023-5197","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-5197","aliases":["CVE-2023-5197"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"5.9","lessThan":"6.6","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:54:14.918Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f15f29fd4779be8a418b66e9d52979bb6d6c2325","https://kernel.dance/f15f29fd4779be8a418b66e9d52979bb6d6c2325","https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f15f29fd4779be8a418b66e9d52979bb6d6c2325","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/f15f29fd4779be8a418b66e9d52979bb6d6c2325","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:52:08.142Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:54:14.918Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2024-01-11T21:06:43.654Z"}}},"related_cves":[{"value":"CVE-2023-5197","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24283,"advisory_id":"95e878f9-7243-4ba1-bb37-9b2ad4355b73","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4921","source_published_at":"2023-09-12T19:45:19.367+00:00","published_at":"2026-10-25T06:33:01.116305+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-4921"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's net/sched: sch_qfq component","summary":"A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.","evidence":"cve:CVE-2023-4921","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-4921","aliases":["CVE-2023-4921"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"3.8","lessThan":"6.6","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:49:38.794Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8fc134fee27f2263988ae38920bc03da416b03d8","https://kernel.dance/8fc134fee27f2263988ae38920bc03da416b03d8","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8fc134fee27f2263988ae38920bc03da416b03d8","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/8fc134fee27f2263988ae38920bc03da416b03d8","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:44:52.210Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-4921","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-05-10T04:00:09.695048Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-25T17:20:09.498Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:49:38.794Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2024-01-11T19:06:28.103Z"}}},"related_cves":[{"value":"CVE-2023-4921","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24277,"advisory_id":"5f77415e-1e5c-4889-bc8a-cc9da6a4e738","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4623","source_published_at":"2023-09-06T13:56:57.295+00:00","published_at":"2026-10-25T06:32:57.624632+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-4623"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component","summary":"A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free. We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.","evidence":"cve:CVE-2023-4623","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-4623","aliases":["CVE-2023-4623"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"2.6.12","lessThan":"6.6","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:36:21.987Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f","https://kernel.dance/b3d26c5702c7d6c45456326e56d2ccf3f103e60f","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/b3d26c5702c7d6c45456326e56d2ccf3f103e60f","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:31:06.625Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-4623","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-02-26T21:52:35.435762Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-27T21:00:32.991Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:36:21.987Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2024-01-11T19:06:55.765Z"}}},"related_cves":[{"value":"CVE-2023-4623","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24265,"advisory_id":"794064f1-4147-402a-8203-777bb55f805e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4015","source_published_at":"2023-09-06T13:52:44.724+00:00","published_at":"2026-10-25T06:32:50.504089+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-4015"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","summary":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.","evidence":"cve:CVE-2023-4015","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-4015","aliases":["CVE-2023-4015"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"6.4","lessThan":"6.5","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:23:00.520Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2","https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2","https://www.debian.org/security/2023/dsa-5492"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:17:11.558Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:23:00.520Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2023-09-10T11:06:38.175Z"}}},"related_cves":[{"value":"CVE-2023-4015","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23249,"advisory_id":"38ddef91-f6d7-4dbb-8b1f-9594136e27ed","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3777","source_published_at":"2023-09-06T13:50:26.344+00:00","published_at":"2026-10-25T06:15:29.392048+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-3777"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","summary":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.","evidence":"cve:CVE-2023-3777","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-3777","aliases":["CVE-2023-3777"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"5.9","lessThan":"6.5","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:13:45.609Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8","https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8","https://www.debian.org/security/2023/dsa-5492"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:08:50.184Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:13:45.609Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2023-11-29T15:06:38.557Z"}}},"related_cves":[{"value":"CVE-2023-3777","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23246,"advisory_id":"25b4282a-2867-4fd0-bf7c-1a1f03aff901","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3611","source_published_at":"2023-07-21T20:49:10.812+00:00","published_at":"2026-10-25T06:15:27.621783+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-3611"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Out-of-bounds write in Linux kernel's net/sched: sch_qfq component","summary":"An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.","evidence":"cve:CVE-2023-3611","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-3611","aliases":["CVE-2023-3611"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"3.8","lessThan":"6.5","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T21:13:41.685Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64","https://kernel.dance/3e337087c3b5805fe0b8a46ba622a962880b5d64","https://www.debian.org/security/2023/dsa-5480","https://security.netapp.com/advisory/ntap-20230908-0002/","https://www.debian.org/security/2023/dsa-5492","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/3e337087c3b5805fe0b8a46ba622a962880b5d64","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230908-0002/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:01:57.288Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3611","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-09-27T13:33:11.602895Z"}}}],"affected":[{"cpes":["cpe:2.3:o:linux:kernel:*:*:*:*:*:*:*:*"],"vendor":"linux","product":"kernel","versions":[{"status":"affected","version":"3.8","lessThan":"6.5","versionType":"custom"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-09-27T13:43:55.993Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:13:41.685Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2024-01-11T19:07:18.060Z"}}},"related_cves":[{"value":"CVE-2023-3611","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23225,"advisory_id":"6dfa4e83-db8e-43d7-8e00-7ee6a3584ee5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3610","source_published_at":"2023-07-21T20:48:13.121+00:00","published_at":"2026-10-25T06:15:13.976985+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-3610"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","summary":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","evidence":"cve:CVE-2023-3610","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-3610","aliases":["CVE-2023-3610"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"5.9","lessThan":"6.4","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T20:59:54.696Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=4bedf9eee016286c835e3d8fa981ddece5338795","https://kernel.dance/4bedf9eee016286c835e3d8fa981ddece5338795","https://www.debian.org/security/2023/dsa-5461","https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","https://security.netapp.com/advisory/ntap-20230818-0005/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=4bedf9eee016286c835e3d8fa981ddece5338795","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/4bedf9eee016286c835e3d8fa981ddece5338795","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5461","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0005/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:01:56.594Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:59:54.696Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2023-08-18T13:06:25.093Z"}}},"related_cves":[{"value":"CVE-2023-3610","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23224,"advisory_id":"26dc7205-c0cd-4ce8-a9e2-526dc3617522","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3609","source_published_at":"2023-07-21T20:47:12.172+00:00","published_at":"2026-10-25T06:15:13.226783+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-3609"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use-after-free in Linux kernel's net/sched: cls_u32 component","summary":"A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.","evidence":"cve:CVE-2023-3609","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-3609","aliases":["CVE-2023-3609"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"],"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"4.14.0","lessThan":"4.14.322","versionType":"semver"},{"status":"affected","version":"4.15.0","lessThan":"4.19.291","versionType":"semver"},{"status":"affected","version":"4.20.0","lessThan":"5.4.248","versionType":"semver"},{"status":"affected","version":"5.5.0","lessThan":"5.10.185","versionType":"semver"},{"status":"affected","version":"5.11.0","lessThan":"5.15.118","versionType":"semver"},{"status":"affected","version":"5.16.0","lessThan":"6.1.35","versionType":"semver"},{"status":"affected","version":"6.2.0","lessThan":"6.3.9","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"04c55383fa5689357bcdd2c8036725a55ed632bc","versionType":"git"}],"platforms":["Linux"],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T20:55:31.437Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc","https://kernel.dance/04c55383fa5689357bcdd2c8036725a55ed632bc","https://security.netapp.com/advisory/ntap-20230818-0005/","https://www.debian.org/security/2023/dsa-5480","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/04c55383fa5689357bcdd2c8036725a55ed632bc","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0005/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:01:56.672Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3609","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-03-05T18:36:26.184616Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-05T18:48:12.763Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:55:31.437Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2026-07-30T16:34:52.372Z"}}},"related_cves":[{"value":"CVE-2023-3609","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23222,"advisory_id":"68d792de-fb00-4759-830f-d9373602849d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3389","source_published_at":"2023-06-28T19:33:55.097+00:00","published_at":"2026-10-25T06:15:12.076757+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-3389"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use after free in io_uring in the Linux Kernel","summary":"A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).","evidence":"cve:CVE-2023-3389","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-3389","aliases":["CVE-2023-3389"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://git.kernel.org","vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"5.13","lessThan":"6.4","versionType":"custom"},{"status":"affected","version":"5.10.162","lessThan":"5.10.185","versionType":"custom"}],"packageName":"kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T20:51:34.078Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.15.y&id=0e388fce7aec40992eadee654193cad345d62663","https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=4716c73b188566865bdd79c3a6709696a224ac04","https://kernel.dance/0e388fce7aec40992eadee654193cad345d62663","https://kernel.dance/4716c73b188566865bdd79c3a6709696a224ac04","https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ef7dfac51d8ed961b742218f526bd589f3900a59","https://kernel.dance/ef7dfac51d8ed961b742218f526bd589f3900a59","https://security.netapp.com/advisory/ntap-20230731-0001/","https://www.debian.org/security/2023/dsa-5480","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.15.y&id=0e388fce7aec40992eadee654193cad345d62663","tags":["patch","x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=4716c73b188566865bdd79c3a6709696a224ac04","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/0e388fce7aec40992eadee654193cad345d62663","tags":["x_transferred"]},{"url":"https://kernel.dance/4716c73b188566865bdd79c3a6709696a224ac04","tags":["x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ef7dfac51d8ed961b742218f526bd589f3900a59","tags":["patch","x_transferred"]},{"url":"https://kernel.dance/ef7dfac51d8ed961b742218f526bd589f3900a59","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230731-0001/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:55:02.753Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3389","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-03-05T18:36:54.442910Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-05T18:55:17.919Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:51:34.078Z"}}],"cna":{"orgId":"14ed7db2-1595-443d-9d34-6215bf890778","shortName":"Google","dateUpdated":"2023-10-19T23:06:49.982Z"}}},"related_cves":[{"value":"CVE-2023-3389","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23221,"advisory_id":"3a77199a-8d31-4cbf-a962-19048523cbb5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3338","source_published_at":"2023-06-30T00:00:00+00:00","published_at":"2026-10-25T06:15:11.487499+00:00","extraction_method":"structured","technologies":["core-cve","fedora","kernel","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-3338"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Crash due to a null pointer dereference in the dn_nsp_send function","summary":"A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.","evidence":"cve:CVE-2023-3338","products":[{"name":{"value":"kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-3338","aliases":["CVE-2023-3338"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"kernel","versions":[{"status":"unaffected","version":"6.5-rc1"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"kernel","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T20:51:32.938Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-3338","https://bugzilla.redhat.com/show_bug.cgi?id=2218618","https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://seclists.org/oss-sec/2023/q2/276","https://security.netapp.com/advisory/ntap-20230824-0005/","https://www.debian.org/security/2023/dsa-5480"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-3338","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218618","name":"RHBZ#2218618","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://seclists.org/oss-sec/2023/q2/276","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230824-0005/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:55:03.281Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3338","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-03-05T18:41:18.404363Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-05T18:55:11.038Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:51:32.938Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-01-23T02:34:01.241Z"}}},"related_cves":[{"value":"CVE-2023-3338","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23220,"advisory_id":"3382e7fd-eb51-4b12-ab39-8075ca6dbf8b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3268","source_published_at":"2023-06-16T00:00:00+00:00","published_at":"2026-10-25T06:15:10.926454+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-3268"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2023-3268","summary":"An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.","evidence":"cve:CVE-2023-3268","products":[{"name":{"value":"kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-3268","aliases":["CVE-2023-3268"],"metrics":[],"affected":[{"vendor":"Linux","product":"kernel","versions":[{"status":"affected","version":"2.6.22","lessThan":"4.19.283","versionType":"semver"},{"status":"affected","version":"4.20","lessThan":"5.4.243","versionType":"semver"},{"status":"affected","version":"5.5","lessThan":"5.10.180","versionType":"semver"},{"status":"affected","version":"5.11","lessThan":"5.15.111","versionType":"semver"},{"status":"affected","version":"5.16","lessThan":"6.1.28","versionType":"semver"},{"status":"affected","version":"6.2","lessThan":"6.2.15","versionType":"semver"},{"status":"affected","version":"6.3","lessThan":"6.3.2","versionType":"semver"}],"packageName":"kernel","collectionURL":"https://git.kernel.org/pub/scm/linux/kernel","defaultStatus":"unaffected"}],"modified":"2026-10-14T20:51:31.782Z","provider":"cve","references":["https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/","https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2","https://www.debian.org/security/2023/dsa-5448","https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1","https://www.debian.org/security/2023/dsa-5480","https://security.netapp.com/advisory/ntap-20230824-0006/","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc%40wangsu.com/T/","tags":["x_transferred"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5448","name":"DSA-5448","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","name":"[debian-lts-announce] 20230727 [SECURITY] [DLA 3508-1] linux security update","tags":["mailing-list","x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43ec16f1450f4936025a9bdf1a273affdb9732c1","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","name":"DSA-5480","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230824-0006/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","name":"[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:48:08.508Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-3268","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-03-06T15:55:22.009931Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-11T14:53:35.403Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:51:31.782Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-08-24T14:27:07.791Z"}}},"related_cves":[{"value":"CVE-2023-3268","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23200,"advisory_id":"3f785996-c8ef-42d5-b20a-2519f980186b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3141","source_published_at":"2023-06-09T00:00:00+00:00","published_at":"2026-10-25T06:14:58.104352+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-3141"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2023-3141","summary":"A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.","evidence":"cve:CVE-2023-3141","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-3141","aliases":["CVE-2023-3141"],"metrics":[],"affected":[{"vendor":"n/a","product":"Kernel","versions":[{"status":"affected","version":"Kenrel version prior to Kernel 6.4-rc1"}]}],"modified":"2026-10-14T20:42:22.545Z","provider":"cve","references":["https://lore.kernel.org/lkml/CAPDyKFoV9aZObZ5GBm0U_-UVeVkBN_rAG-kH3BKoP4EXdYM4bw%40mail.gmail.com/t/","https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4","https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=63264422785021704c39b38f65a78ab9e4a186d7","https://security.netapp.com/advisory/ntap-20230706-0004/","https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lore.kernel.org/lkml/CAPDyKFoV9aZObZ5GBm0U_-UVeVkBN_rAG-kH3BKoP4EXdYM4bw%40mail.gmail.com/t/","tags":["x_transferred"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4","tags":["x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=63264422785021704c39b38f65a78ab9e4a186d7","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230706-0004/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","name":"[debian-lts-announce] 20230727 [SECURITY] [DLA 3508-1] linux security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","name":"[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:48:07.922Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-3141","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-03-06T15:55:27.324081Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-11T14:56:02.248Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:42:22.545Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2023-10-19T23:06:24.549Z"}}},"related_cves":[{"value":"CVE-2023-3141","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23198,"advisory_id":"440baf04-3d4d-4c92-9677-011f654cd560","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-2898","source_published_at":"2023-05-26T00:00:00+00:00","published_at":"2026-10-25T06:14:56.973963+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-2898"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2023-2898","summary":"There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.","evidence":"cve:CVE-2023-2898","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-2898","aliases":["CVE-2023-2898"],"metrics":[],"affected":[{"vendor":"n/a","product":"Kernel","versions":[{"status":"affected","version":"NA"}]}],"modified":"2026-10-14T20:33:14.403Z","provider":"cve","references":["https://lore.kernel.org/linux-f2fs-devel/20230522124203.3838360-1-chao%40kernel.org/","https://www.debian.org/security/2023/dsa-5480","https://www.debian.org/security/2023/dsa-5492","https://security.netapp.com/advisory/ntap-20230929-0002/","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lore.kernel.org/linux-f2fs-devel/20230522124203.3838360-1-chao%40kernel.org/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","name":"DSA-5480","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","name":"DSA-5492","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230929-0002/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","name":"[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:41:03.609Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-2898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-10-15T17:09:06.632763Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-10-15T17:12:06.888Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:33:14.403Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2023-10-19T23:06:18.459Z"}}},"related_cves":[{"value":"CVE-2023-2898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23152,"advisory_id":"7bb22194-f6e8-43ee-801a-3897ddf6d279","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-1206","source_published_at":"2023-06-30T00:00:00+00:00","published_at":"2026-10-25T06:14:28.410098+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-1206"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2023-1206","summary":"A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.","evidence":"cve:CVE-2023-1206","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-1206","aliases":["CVE-2023-1206"],"metrics":[],"affected":[{"vendor":"n/a","product":"Kernel","versions":[{"status":"affected","version":"kernel 6.5-rc1"}]}],"modified":"2026-10-14T20:24:13.456Z","provider":"cve","references":["https://bugzilla.redhat.com/show_bug.cgi?id=2175903","https://www.debian.org/security/2023/dsa-5480","https://www.debian.org/security/2023/dsa-5492","https://security.netapp.com/advisory/ntap-20230929-0006/","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175903","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","name":"DSA-5480","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","name":"DSA-5492","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230929-0006/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","name":"[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","name":"[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T05:40:59.789Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-1206","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-10-15T17:09:04.074571Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-10-15T17:11:50.947Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:24:13.456Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-01-11T19:06:53.711Z"}}},"related_cves":[{"value":"CVE-2023-1206","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23121,"advisory_id":"dd569de6-b9cd-475e-94cc-3ffef3f95e4b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-0590","source_published_at":"2023-03-23T00:00:00+00:00","published_at":"2026-10-25T06:13:14.97012+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2023-0590"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2023-0590","summary":"A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 (\"net: sched: fix race condition in qdisc_graft()\") not applied yet, then kernel could be affected.","evidence":"cve:CVE-2023-0590","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-0590","aliases":["CVE-2023-0590"],"metrics":[],"affected":[{"vendor":"n/a","product":"Kernel","versions":[{"status":"affected","version":"Linux kernel 6.1-rc2"}]}],"modified":"2026-10-14T20:15:55.300Z","provider":"cve","references":["https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/","https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","name":"[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T05:17:49.847Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:15:55.300Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-01-11T19:06:27.652Z"}}},"related_cves":[{"value":"CVE-2023-0590","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22924,"advisory_id":"33eb4e63-3891-400c-9c44-c3e3bda68d2c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-42432","source_published_at":"2023-03-29T00:00:00+00:00","published_at":"2026-10-25T06:10:08.761827+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-42432"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-42432","summary":"This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nft_osf_eval function. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-18540.","evidence":"cve:CVE-2022-42432","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2022-42432","aliases":["CVE-2022-42432"],"metrics":[{"cvssV3_0":{"scope":"UNCHANGED","version":"3.0","baseScore":5.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"6.0-rc2"}]}],"modified":"2026-10-14T18:22:06.171Z","provider":"cve","references":["https://www.zerodayinitiative.com/advisories/ZDI-22-1457/","https://patchwork.ozlabs.org/project/netfilter-devel/patch/20220907082618.1193201-1-pablo%40netfilter.org/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1457/","tags":["x_transferred"]},{"url":"https://patchwork.ozlabs.org/project/netfilter-devel/patch/20220907082618.1193201-1-pablo%40netfilter.org/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T13:10:40.840Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-42432","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-02-14T20:24:58.646181Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-14T20:25:02.820Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T18:22:06.171Z"}}],"cna":{"orgId":"99f1926a-a320-47d8-bbb5-42feb611262e","shortName":"zdi","dateUpdated":"2023-03-29T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-42432","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":22829,"advisory_id":"3f4dcf2a-e5ba-4e63-a219-0e51c8e21cc5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-38096","source_published_at":"2022-09-09T14:39:51.163+00:00","published_at":"2026-10-25T06:08:00.908726+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-38096"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"There is a NULL pointer vulnerability in vmwgfx driver","summary":"A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).","evidence":"cve:CVE-2022-38096","products":[{"name":{"value":"kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2022-38096","aliases":["CVE-2022-38096"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"Linux","product":"kernel","versions":[{"status":"affected","version":"v4.20-rc1","lessThan":"5.13.0-52*","versionType":"custom"}]}],"modified":"2026-10-14T17:30:51.795Z","provider":"cve","references":["https://bugzilla.openanolis.cn/show_bug.cgi?id=2073","https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-38096","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-06-26T13:45:25.191519Z"}}}],"affected":[{"cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"vendor":"linux","product":"linux_kernel","versions":[{"status":"affected","version":"v4.20-rc1","lessThan":"5.14","versionType":"custom"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-06-26T13:49:29.690Z"}},{"title":"CVE Program Container","references":[{"url":"https://bugzilla.openanolis.cn/show_bug.cgi?id=2073","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","name":"[debian-lts-announce] 20240625 [SECURITY] [DLA 3842-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T10:45:52.802Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T17:30:51.795Z"}}],"cna":{"orgId":"cb8f1db9-b4b1-487b-a760-f65c4f368d8e","shortName":"Anolis","dateUpdated":"2024-06-25T21:08:05.642Z"}}},"related_cves":[{"value":"CVE-2022-38096","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":22812,"advisory_id":"dddac184-a5b4-4833-ab9a-0a5e087cb4aa","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-36280","source_published_at":"2022-09-09T14:39:50.986+00:00","published_at":"2026-10-25T06:07:50.032026+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-36280"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"There is an out-of-bounds write vulnerability in vmwgfx driver","summary":"An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).","evidence":"cve:CVE-2022-36280","products":[{"name":{"value":"kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2022-36280","aliases":["CVE-2022-36280"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"Linux","product":"kernel","versions":[{"status":"affected","version":"v3.2-rc1","lessThan":"5.13.0-52*","versionType":"custom"}]}],"modified":"2026-10-14T17:07:51.803Z","provider":"cve","references":["https://bugzilla.openanolis.cn/show_bug.cgi?id=2071","https://www.debian.org/security/2023/dsa-5324","https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.openanolis.cn/show_bug.cgi?id=2071","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5324","name":"DSA-5324","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html","name":"[debian-lts-announce] 20230302 [SECURITY] [DLA 3349-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html","name":"[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T10:00:04.335Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T17:07:51.803Z"}}],"cna":{"orgId":"cb8f1db9-b4b1-487b-a760-f65c4f368d8e","shortName":"Anolis","dateUpdated":"2023-05-03T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-36280","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":22013,"advisory_id":"c7e0812e-feef-4d4d-a366-898cfe36cd89","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-4662","source_published_at":"2022-12-22T00:00:00+00:00","published_at":"2026-10-25T05:54:27.103135+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-4662"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-4662","summary":"A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.","evidence":"cve:CVE-2022-4662","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-4662","aliases":["CVE-2022-4662"],"metrics":[],"affected":[{"vendor":"n/a","product":"Kernel","versions":[{"status":"affected","version":"Linux kernel 6.0-rc4"}]}],"modified":"2026-10-14T14:44:16.709Z","provider":"cve","references":["https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/","https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/","tags":["x_transferred"]},{"url":"https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:48:39.476Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-4662","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-09T18:03:46.255838Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-09T18:36:53.874Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T14:44:16.709Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2022-12-22T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-4662","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21939,"advisory_id":"943fce32-978a-4973-b6c4-611a56c6f797","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-4139","source_published_at":"2023-01-27T00:00:00+00:00","published_at":"2026-10-25T05:53:42.985776+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-4139"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-4139","summary":"An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.","evidence":"cve:CVE-2022-4139","products":[{"name":{"value":"kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-4139","aliases":["CVE-2022-4139"],"metrics":[],"affected":[{"vendor":"n/a","product":"kernel","versions":[{"status":"affected","version":"kernel 6.1-rc7"}]}],"modified":"2026-10-14T13:51:59.507Z","provider":"cve","references":["https://bugzilla.redhat.com/show_bug.cgi?id=2147572","https://www.openwall.com/lists/oss-security/2022/11/30/1","https://security.netapp.com/advisory/ntap-20230309-0004/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2147572","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2022/11/30/1","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230309-0004/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:27:54.550Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-4139","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-03-28T15:43:18.557475Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-28T15:43:43.668Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:59.507Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2023-03-09T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-4139","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21937,"advisory_id":"0131f594-43a3-4e83-9de0-112fd0313c09","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-4095","source_published_at":"2023-03-22T00:00:00+00:00","published_at":"2026-10-25T05:53:41.788921+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-4095"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-4095","summary":"A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.","evidence":"cve:CVE-2022-4095","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-4095","aliases":["CVE-2022-4095"],"metrics":[],"affected":[{"vendor":"n/a","product":"Kernel","versions":[{"status":"affected","version":"Linux Kernel prior to kernel 6.0 rc4"}]}],"modified":"2026-10-14T13:51:57.155Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c53b3dcb9942b8ed7f81ee3921c4085d87070c73","https://security.netapp.com/advisory/ntap-20230420-0005/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c53b3dcb9942b8ed7f81ee3921c4085d87070c73","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230420-0005/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:27:54.492Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-4095","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-02-26T16:10:23.677967Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-26T16:10:49.660Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:57.155Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2023-04-20T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-4095","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21934,"advisory_id":"575164c0-4d6c-4e9a-ae23-6c4fbe219a55","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-3649","source_published_at":"2022-10-21T00:00:00+00:00","published_at":"2026-10-25T05:53:39.450105+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-3649"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel BPF inode.c nilfs_new_inode use after free","summary":"A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992.","evidence":"cve:CVE-2022-3649","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2022-3649","aliases":["CVE-2022-3649"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T13:51:50.499Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d325dc6eb763c10f591c239550b8c7e5466a5d09","https://vuldb.com/?id.211992","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html","https://security.netapp.com/advisory/ntap-20230214-0009/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d325dc6eb763c10f591c239550b8c7e5466a5d09","tags":["x_transferred"]},{"url":"https://vuldb.com/?id.211992","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html","name":"[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update","tags":["mailing-list","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230214-0009/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:14:03.289Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:50.499Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2023-02-14T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-3649","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21933,"advisory_id":"c3b7e97e-78ea-44f8-b52c-121403b8f5bf","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-3635","source_published_at":"2022-10-21T00:00:00+00:00","published_at":"2026-10-25T05:53:38.735825+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-3635"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel IPsec idt77252.c tst_timer use after free","summary":"A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.","evidence":"cve:CVE-2022-3635","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2022-3635","aliases":["CVE-2022-3635"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T13:51:48.270Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=3f4093e2bf4673f218c0bf17d8362337c400e77b","https://vuldb.com/?id.211934","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=3f4093e2bf4673f218c0bf17d8362337c400e77b","tags":["x_transferred"]},{"url":"https://vuldb.com/?id.211934","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:14:03.270Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-3635","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-14T16:59:17.924201Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-15T13:25:17.535Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:48.270Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2022-11-01T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-3635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21932,"advisory_id":"01cc2a80-5838-45ca-8b9f-f047efa73deb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-3646","source_published_at":"2022-10-21T00:00:00+00:00","published_at":"2026-10-25T05:53:37.828238+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-3646"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel BPF segment.c nilfs_attach_log_writer memory leak","summary":"A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability.","evidence":"cve:CVE-2022-3646","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2022-3646","aliases":["CVE-2022-3646"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T13:51:49.404Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d0d51a97063db4704a5ef6bc978dddab1636a306","https://vuldb.com/?id.211961","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d0d51a97063db4704a5ef6bc978dddab1636a306","tags":["x_transferred"]},{"url":"https://vuldb.com/?id.211961","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html","name":"[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:14:03.291Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-3646","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-14T17:07:39.915979Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-15T13:24:51.206Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:49.404Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2022-12-24T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-3646","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21931,"advisory_id":"2a78f660-c796-472b-af0d-9add15f5992e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-3633","source_published_at":"2022-10-21T00:00:00+00:00","published_at":"2026-10-25T05:53:37.041056+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-3633"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel transport.c j1939_session_destroy memory leak","summary":"A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.","evidence":"cve:CVE-2022-3633","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2022-3633","aliases":["CVE-2022-3633"],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}},{"cvssV2_0":{"version":"2.0","baseScore":2.7,"vectorString":"AV:A/AC:L/Au:S/C:N/I:N/A:P"}}],"affected":[{"vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T13:51:47.172Z","provider":"cve","references":["https://vuldb.com/?id.211932","https://vuldb.com/?ctiid.211932","https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=8c21c54a53ab21842f5050fa090f26b03c0313d6"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.211932","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.211932","tags":["signature","permissions-required","x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=8c21c54a53ab21842f5050fa090f26b03c0313d6","tags":["patch","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:14:03.231Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-3633","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:03:05.525560Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-23T16:45:07.843Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:47.172Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2023-10-20T14:03:55.871Z"}}},"related_cves":[{"value":"CVE-2022-3633","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21930,"advisory_id":"00b6bc2a-121a-47f7-8304-d7178e0329a3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-3629","source_published_at":"2022-10-21T00:00:00+00:00","published_at":"2026-10-25T05:53:36.333236+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-3629"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel af_vsock.c vsock_connect memory leak","summary":"A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file net/vmw_vsock/af_vsock.c. The manipulation leads to memory leak. The complexity of an attack is rather high. The exploitation appears to be difficult. It is recommended to apply a patch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability.","evidence":"cve:CVE-2022-3629","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2022-3629","aliases":["CVE-2022-3629"],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":2.6,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"}},{"cvssV3_0":{"version":"3.0","baseScore":2.6,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"}},{"cvssV2_0":{"version":"2.0","baseScore":1.4,"vectorString":"AV:A/AC:H/Au:S/C:N/I:N/A:P"}}],"affected":[{"vendor":"Linux","product":"Kernel","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T13:51:46.022Z","provider":"cve","references":["https://vuldb.com/?id.211930","https://vuldb.com/?ctiid.211930","https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=7e97cfed9929eaabc41829c395eb0d1350fccb9d"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.211930","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.211930","tags":["signature","permissions-required","x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=7e97cfed9929eaabc41829c395eb0d1350fccb9d","tags":["patch","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:14:02.789Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-3629","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:03:09.053641Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-23T16:45:16.589Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:46.022Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2023-10-20T14:02:42.617Z"}}},"related_cves":[{"value":"CVE-2022-3629","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21929,"advisory_id":"7040b971-a9cd-4060-b7df-bddef5e739cb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-3628","source_published_at":"2023-01-12T00:00:00+00:00","published_at":"2026-10-25T05:53:35.481114+00:00","extraction_method":"structured","technologies":["core-cve","kernel"],"cve_ids":["CVE-2022-3628"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-3628","summary":"A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.","evidence":"cve:CVE-2022-3628","products":[{"name":{"value":"Kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-3628","aliases":["CVE-2022-3628"],"metrics":[],"affected":[{"vendor":"n/a","product":"Kernel","versions":[{"status":"affected","version":"Linux kernel 6.1-rc5"}]}],"modified":"2026-10-14T13:51:44.871Z","provider":"cve","references":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c?id=6788ba8aed4e28e90f72d68a9d794e34eac17295"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c?id=6788ba8aed4e28e90f72d68a9d794e34eac17295","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T01:14:02.991Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-3628","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-08T14:15:33.236322Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-08T14:16:10.907Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T13:51:44.871Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2023-01-12T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-3628","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}}],"next_after":24300,"next_before":21929}