Vulnerability · Published Sep 13, 2023 · Assigned by redhat
CVE-2023-2680Dma reentrancy issue (incomplete fix for cve-2021-3750)
High 7.5
In plain English
A high-severity use-after-free in Extra Packages for Enterprise Linux from Fedora. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 85.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | qemu-guest-agent | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-img | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-audio-pa | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-block-blkio | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-block-curl | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-block-rbd | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-common | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-core | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-ccw | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-device-usb-host | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-device-usb-redirect | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-docs | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-tools | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-ui-egl-headless | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-kvm-ui-opengl | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
| AlmaLinux:9 | qemu-pr-helper | 17:8.0.0-16.el9_3.alma.1 | ALSA-2023:6368 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | qemu | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat OpenStack Platform 13 (Queens) | see references |
| Fedora | Fedora | see references |
| Fedora | Extra Packages for Enterprise Linux | see references |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://access.redhat.com/security/cve/CVE-2023-2680 vdb-entry, x_refsource_REDHAT
- RHBZ#2203387 issue-tracking, x_refsource_REDHAT
- https://security.netapp.com/advisory/ntap-20231116-0001/