{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.14.0-362.8.1.el9_3","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-virtualization-host","product":"Red Hat Virtualization 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2023-4194","cwes":["CWE-843"],"description":"A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode->i_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.","epss":{"date":"2026-11-02","percentile":0.18889,"score":0.00267},"exploits":[],"kev":null,"metrics":[{"score":5.5,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},{"score":5.5,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},{"score":5.5,"severity":"medium","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.1"}],"modifiedAt":1793661438260,"publishedAt":1691414384215,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2023:6583"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2023-4194"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229498"},{"source":"CNA: redhat","tags":[],"url":"https://lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/"},{"source":"CNA: redhat","tags":[],"url":"https://lore.kernel.org/all/20230731164237.48365-2-lersek@redhat.com/"},{"source":"CNA: redhat","tags":[],"url":"https://lore.kernel.org/all/20230731164237.48365-3-lersek@redhat.com/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2023:6583"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/security/cve/CVE-2023-4194"},{"source":"ADP: CVE","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229498"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/344H6HO6SSC4KT7PDFXSDIXKMKHISSGF/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3TYLSJ2SAI7RF56ZLQ5CQWCJLVJSD73Q/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lore.kernel.org/all/20230731164237.48365-2-lersek@redhat.com/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lore.kernel.org/all/20230731164237.48365-3-lersek@redhat.com/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20231027-0002/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.debian.org/security/2023/dsa-5480"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.debian.org/security/2023/dsa-5492"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2023:6583"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-4194"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229498"},{"source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"],"url":"https://lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/"},{"source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"],"url":"https://lore.kernel.org/all/20230731164237.48365-2-lersek@redhat.com/"},{"source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"],"url":"https://lore.kernel.org/all/20230731164237.48365-3-lersek@redhat.com/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2023:6583"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-4194"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229498"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/344H6HO6SSC4KT7PDFXSDIXKMKHISSGF/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3TYLSJ2SAI7RF56ZLQ5CQWCJLVJSD73Q/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"],"url":"https://lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"],"url":"https://lore.kernel.org/all/20230731164237.48365-2-lersek@redhat.com/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"],"url":"https://lore.kernel.org/all/20230731164237.48365-3-lersek@redhat.com/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://security.netapp.com/advisory/ntap-20231027-0002/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://www.debian.org/security/2023/dsa-5480"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://www.debian.org/security/2023/dsa-5492"}],"remediation":[{"kind":"fix","source":"secalert@redhat.com","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/"},{"kind":"fix","source":"secalert@redhat.com","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://lore.kernel.org/all/20230731164237.48365-2-lersek@redhat.com/"},{"kind":"fix","source":"secalert@redhat.com","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://lore.kernel.org/all/20230731164237.48365-3-lersek@redhat.com/"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://lore.kernel.org/all/20230731164237.48365-1-lersek@redhat.com/"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://lore.kernel.org/all/20230731164237.48365-2-lersek@redhat.com/"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://lore.kernel.org/all/20230731164237.48365-3-lersek@redhat.com/"}],"revision":"c6f464b344799338ad8d7f1c80a76192316bcbe79a7cc2fae0f6f7f7de7a8977","sources":[{"modifiedAt":1793659139160,"name":"CNA: redhat","retrievedAt":1793660922464,"url":"https://www.cve.org/CVERecord?id=CVE-2023-4194"},{"modifiedAt":1793661438260,"name":"NVD","retrievedAt":1793665095443,"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4194"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793660931490,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-4194"}],"ssvc":{"assessedAt":1748967289416,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid","updatedAt":1793665095443}