An update for kernel is now available for openEuler-20.03-LTS-SP3
Security Advisory
openeuler-security@openeuler.org
openEuler security committee
openEuler-SA-2023-1351
Final
1.0
1.0
2023-06-17
Initial
2023-06-17
2023-06-17
openEuler SA Tool V1.0
2023-06-17
kernel security update
An update for kernel is now available for openEuler-20.03-LTS-SP3.
The Linux Kernel image for RaspberryPi.
Security Fix(es):
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.(CVE-2023-33288)
An update for kernel is now available for openEuler-20.03-LTS-SP3.
openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.
Medium
kernel
https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1351
https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2023-33288
https://nvd.nist.gov/vuln/detail/CVE-2023-33288
openEuler-20.03-LTS-SP3
kernel-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-source-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
python2-perf-debuginfo-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
perf-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
python3-perf-debuginfo-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-devel-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-tools-devel-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-tools-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
bpftool-debuginfo-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
python3-perf-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-tools-debuginfo-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-debuginfo-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
perf-debuginfo-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
python2-perf-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
bpftool-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-debugsource-4.19.90-2306.3.0.0205.oe1.aarch64.rpm
kernel-4.19.90-2306.3.0.0205.oe1.src.rpm
bpftool-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-tools-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-devel-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-tools-devel-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-debugsource-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
python2-perf-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
python3-perf-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-tools-debuginfo-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
bpftool-debuginfo-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
perf-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
perf-debuginfo-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-debuginfo-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
kernel-source-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
python2-perf-debuginfo-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
python3-perf-debuginfo-4.19.90-2306.3.0.0205.oe1.x86_64.rpm
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.
2023-06-17
CVE-2023-33288
openEuler-20.03-LTS-SP3
Medium
4.7
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
kernel security update
2023-06-17
https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1351