Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ CLSA-2023-1682605601 — linux-buildinfo-4.4.0-238-tuxcare.els9-g (CVE-2022-1198 +29 more)

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Fix of 53 CVEs

  • CVE-2022-1198
  • drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
  • Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) //

CVE-2020-36516

  • ipv4: avoid using shared IP generator for connected sockets
  • CVE-2022-36879
  • xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in

xfrm_bundle_lookup()

  • CVE-2022-3061
  • video: fbdev: i740fb: Error out if 'pixclock' equals zero
  • CVE-2022-1516
  • net/x25: Fix null-ptr-deref caused by x25_disconnect
  • CVE-2022-1205
  • ax25: Fix NULL pointer dereferences in ax25 timers
  • ax25: Fix UAF bugs in ax25 timers
  • CVE-2022-2318
  • net: rose: fix UAF bugs caused by timer handler
  • CVE-2022-1195
  • hamradio: defer 6pack kfree after unregister_netdev
  • hamradio: defer ax25 kfree after unregister_netdev
  • hamradio: improve the incomplete fix to avoid NPD
  • CVE-2022-0494
  • block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
  • CVE-2021-26401
  • x86/speculation: Use generic retpoline by default on AMD
  • Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) //

CVE-2022-39188

  • mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  • Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112) //

CVE-2022-39188

  • mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
  • CVE-2022-45934
  • Bluetooth: L2CAP: Fix u8 overflow
  • Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355) //

CVE-2022-2991

  • lightnvm: disable the subsystem
  • Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) //

CVE-2021-4203

  • af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
  • Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) //

CVE-2021-3772

  • sctp: fix the processing for INIT chunk
  • sctp: fix the processing for INIT_ACK chunk
  • Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) //

CVE-2021-3772

  • sctp: use init_tag from inithdr for ABORT chunk
  • sctp: fix the processing for COOKIE_ECHO chunk
  • sctp: add vtag check in sctp_sf_violation
  • sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
  • sctp: add vtag check in sctp_sf_ootb
  • CVE-2022-3303
  • ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  • Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) //

CVE-2022-1462

  • tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
  • tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
  • CVE-2022-1462
  • tty: fix deadlock caused by calling printk() under tty_port->lock
  • Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) //

CVE-2022-1462

  • pty: do tty_flip_buffer_push without port->lock in pty_write
  • Bionic update: upstream stable patchset 2019-02-08 (LP: #1815234) //

CVE-2022-1462

  • tty: Fix data race in tty_insert_flip_string_fixed_flag
  • Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) //

CVE-2022-4662

  • USB: core: Prevent nested device-reset calls
  • Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) //

CVE-2022-0617

  • udf: Restore i_lenAlloc when inode expansion fails
  • udf: Fix NULL ptr deref when converting from inline format
  • Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) //

CVE-2022-1016

  • netfilter: nf_tables: initialize registers in nft_do_chain()
  • Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) //

CVE-2022-2380

  • video: fbdev: sm712fb: Fix crash in smtcfb_read()
  • Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) //

CVE-2022-3111

  • power: supply: wm8350-power: Add missing free in free_charger_irq
  • CVE-2022-3628
  • wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
  • Bionic update: upstream stable patchset 2021-08-27 (LP: #1941916) //

CVE-2021-3732

  • ovl: prevent private clone if bind mount is not allowed
  • Bionic update: upstream stable patchset 2021-12-13 (LP: #1954703) //

CVE-2021-45868

  • quota: check block number when reading the block in quota file
  • Bionic update: upstream stable patchset 2021-04-30 (LP: #1926808) //

CVE-2021-3659

  • net: mac802154: Fix general protection fault
  • Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) //

CVE-2023-1074

  • sctp: fail if no bound addresses can be used for a given scope
  • Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) //

CVE-2023-1095

  • netfilter: nf_tables: fix null deref due to zeroed list head
  • CVE-2023-1118
  • media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  • Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) //

CVE-2023-26607

  • ntfs: fix out-of-bounds read in

Affected software

CLSA-2023-1682605601 is recorded against 34 packages.

  • linux-buildinfo-4.4.0-238-tuxcare.els9-generic (fixed in 4.4.0-238.272)
  • linux-buildinfo-4.4.0-238-tuxcare.els9-lowlatency (fixed in 4.4.0-238.272)
  • linux-cloud-tools-4.4.0-238-tuxcare.els9 (fixed in 4.4.0-238.272)
  • linux-cloud-tools-4.4.0-238-tuxcare.els9-generic (fixed in 4.4.0-238.272)
  • linux-cloud-tools-4.4.0-238-tuxcare.els9-lowlatency (fixed in 4.4.0-238.272)
  • linux-cloud-tools-common (fixed in 4.4.0-238.272)
  • linux-cloud-tools-generic (fixed in 4.4.0.238.272)
  • linux-cloud-tools-lowlatency (fixed in 4.4.0.238.272)
  • linux-crashdump (fixed in 4.4.0.238.272)
  • linux-doc (fixed in 4.4.0-238.272)
  • linux-generic (fixed in 4.4.0.238.272)
  • linux-headers-4.4.0-238-tuxcare.els9 (fixed in 4.4.0-238.272)
  • linux-headers-4.4.0-238-tuxcare.els9-generic (fixed in 4.4.0-238.272)
  • linux-headers-4.4.0-238-tuxcare.els9-lowlatency (fixed in 4.4.0-238.272)
  • linux-headers-generic (fixed in 4.4.0.238.272)
  • linux-headers-lowlatency (fixed in 4.4.0.238.272)
  • linux-image-generic (fixed in 4.4.0.238.272)
  • linux-image-lowlatency (fixed in 4.4.0.238.272)
  • linux-image-unsigned-4.4.0-238-tuxcare.els9-generic (fixed in 4.4.0-238.272)
  • linux-image-unsigned-4.4.0-238-tuxcare.els9-lowlatency (fixed in 4.4.0-238.272)
  • linux-libc-dev (fixed in 4.4.0-238.272)
  • linux-lowlatency (fixed in 4.4.0.238.272)
  • linux-modules-4.4.0-238-tuxcare.els9-generic (fixed in 4.4.0-238.272)
  • linux-modules-4.4.0-238-tuxcare.els9-lowlatency (fixed in 4.4.0-238.272)
Show the remaining 10 packages
  • linux-modules-extra-4.4.0-238-tuxcare.els9-generic (fixed in 4.4.0-238.272)
  • linux-source (fixed in 4.4.0.238.272)
  • linux-source-4.4.0 (fixed in 4.4.0-238.272)
  • linux-tools-4.4.0-238-tuxcare.els9 (fixed in 4.4.0-238.272)
  • linux-tools-4.4.0-238-tuxcare.els9-generic (fixed in 4.4.0-238.272)
  • linux-tools-4.4.0-238-tuxcare.els9-lowlatency (fixed in 4.4.0-238.272)
  • linux-tools-common (fixed in 4.4.0-238.272)
  • linux-tools-generic (fixed in 4.4.0.238.272)
  • linux-tools-host (fixed in 4.4.0-238.272)
  • linux-tools-lowlatency (fixed in 4.4.0.238.272)

Timeline and source

Published on 27 April 2023 and last revised on 4 June 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

errata.cloudlinux.com (Advisory)

Other advisories for this package

linux-buildinfo-4.4.0-238-tuxcare.els9-generic has other advisories on record. If you are patching this one, these are worth checking on the same host:

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2023-04-27
Updated 2026-08-20
Modified 2026-06-04
Fix URL N/A

Affected Packages

Software From version Fixed in
linux-buildinfo-4.4.0-238-tuxcare.els9-generic — 4.4.0-238.272
linux-buildinfo-4.4.0-238-tuxcare.els9-lowlatency — 4.4.0-238.272
linux-cloud-tools-4.4.0-238-tuxcare.els9 — 4.4.0-238.272
linux-cloud-tools-4.4.0-238-tuxcare.els9-generic — 4.4.0-238.272
linux-cloud-tools-4.4.0-238-tuxcare.els9-lowlatency — 4.4.0-238.272
linux-cloud-tools-common — 4.4.0-238.272
linux-cloud-tools-generic — 4.4.0.238.272
linux-cloud-tools-lowlatency — 4.4.0.238.272
linux-crashdump — 4.4.0.238.272
linux-doc — 4.4.0-238.272
linux-generic — 4.4.0.238.272
linux-headers-4.4.0-238-tuxcare.els9 — 4.4.0-238.272
linux-headers-4.4.0-238-tuxcare.els9-generic — 4.4.0-238.272
linux-headers-4.4.0-238-tuxcare.els9-lowlatency — 4.4.0-238.272
linux-headers-generic — 4.4.0.238.272
linux-headers-lowlatency — 4.4.0.238.272
linux-image-generic — 4.4.0.238.272
linux-image-lowlatency — 4.4.0.238.272
linux-image-unsigned-4.4.0-238-tuxcare.els9-generic — 4.4.0-238.272
linux-image-unsigned-4.4.0-238-tuxcare.els9-lowlatency — 4.4.0-238.272
linux-libc-dev — 4.4.0-238.272
linux-lowlatency — 4.4.0.238.272
linux-modules-4.4.0-238-tuxcare.els9-generic — 4.4.0-238.272
linux-modules-4.4.0-238-tuxcare.els9-lowlatency — 4.4.0-238.272
linux-modules-extra-4.4.0-238-tuxcare.els9-generic — 4.4.0-238.272
linux-source — 4.4.0.238.272
linux-source-4.4.0 — 4.4.0-238.272
linux-tools-4.4.0-238-tuxcare.els9 — 4.4.0-238.272
linux-tools-4.4.0-238-tuxcare.els9-generic — 4.4.0-238.272
linux-tools-4.4.0-238-tuxcare.els9-lowlatency — 4.4.0-238.272
linux-tools-common — 4.4.0-238.272
linux-tools-generic — 4.4.0.238.272
linux-tools-host — 4.4.0-238.272
linux-tools-lowlatency — 4.4.0.238.272

Similar Threats

Free Vulnerability Check

Is your site affected by CLSA-2023-1682605601?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against CLSA-2023-1682605601 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Browse related advisories

All advisoriesChainguardChainguard 2023
✓