Log in Start free

Vulnerability · Published Oct 27, 2023 · Assigned by mitre

CVE-2023-46813

High 7.0

In plain English

A high-severity security flaw in the bpftool package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.7%top 45.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-abi-stablelists4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-core4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-cross-headers4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-debug4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-debug-core4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-debug-devel4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-debug-modules4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-debug-modules-extra4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-devel4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-doc4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-modules4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-modules-extra4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-tools4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-tools-libs4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-tools-libs-devel4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-zfcpdump4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-zfcpdump-core4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-zfcpdump-devel4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-zfcpdump-modules4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8perf4.18.0-513.18.1.el8_9ALSA-2024:0897
AlmaLinux:8python3-perf4.18.0-513.18.1.el8_9ALSA-2024:0897
Debian:12linux6.1.64-1DEBIAN-CVE-2023-46813
Debian:13linux6.5.10-1DEBIAN-CVE-2023-46813
Debian:14linux6.5.10-1DEBIAN-CVE-2023-46813
Ubuntu:22.04:LTSlinux5.15.0-94.104UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux5.15.0-94.104USN-6626-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-aws5.15.0-1053.58UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-aws5.15.0-1053.58USN-6626-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-azure5.15.0-1056.64UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-azure5.15.0-1056.64USN-6626-3
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1056.64.1UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1056.64.1USN-6626-3
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-gcp5.15.0-1051.59USN-6626-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1051.59UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-gke5.15.0-1050.55UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-gke5.15.0-1050.55USN-6626-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1036.42USN-6626-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1036.42UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-17.17~22.04.1UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-17.17~22.04.1USN-6624-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1046.49USN-6626-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1046.49UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1047.53UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1047.53USN-6628-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1050.55UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-kvm5.15.0-1050.55USN-6626-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-94.104UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-94.104USN-6626-2
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-17.17.1.1.1~22.04.1UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-17.17.1.1.1~22.04.1USN-6624-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1044.44UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1044.44USN-6626-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1014.14UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1022.22UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1009.9UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1027.27USN-6533-1
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1027.27UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1014.15USN-6624-1
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1014.15UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-oracle5.15.0-1051.57UBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-oracle5.15.0-1051.57USN-6626-1
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-raspi5.15.0-1046.49USN-6626-2
Ubuntu:22.04:LTSlinux-raspi5.15.0-1046.49UBUNTU-CVE-2023-46813
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-46813
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1027.31UBUNTU-CVE-2023-46813

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References