CVE-2023-0386

high KEV
Published 2023-04-10 · Modified 2023-09-15
CVSS v3
CVSS v2
VIR risk
9.5

Description

Important: kernel-rt security and bug fix update

CISA KEV

Vendor
Linux
Product
Kernel
Due date
2025-07-08

Predictions

Exploit likelihood
99%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2023-1584.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2023:1584

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2023-1566.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2163379

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2152548

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2150272

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2023:1566

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2023-1691.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2023-1703.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2159505

vendor Authored 2026-05-27

Vendor advisory: cisa-kev — This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a ; https://access.redhat.com/security/cve/cve-2023-0386 ; https://security.netapp.com/advisory/ntap-20230420-0004/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-0386

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2023-0386

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2023-0386.html

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2023:1566

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2023:1584

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RXSA-2023:1566

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2023:1703

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2023:1691

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2023:1681

Exploits

OS impact

OSVersionStatusFixed in
redhat rhel9fixed
rockylinux rocky8fixed
suse slesaffected
debian debianbookwormfixed6.1.11-1
debian debianbullseyefixed5.10.179-1
debian debianforkyfixed6.1.11-1
debian debiansidfixed6.1.11-1
debian debiantrixiefixed6.1.11-1

References

Verify integrity in audit chain (admin only). AS-IS.